Documentation

• How to analyze a RAM dump in your browser

  Step-by-step — open a memory dump, auto-detect the OS, and get a process list in your browser with no tools to install.

• Is it safe to analyze memory dumps online?

  Memory dumps contain passwords, keys and PII. Here's why ramparser is safe — it parses RAM images fully client-side, with zero upload.

• Memory dump file formats explained (.mem, .raw, .vmem, LiME)

  Which RAM dump formats work with browser memory forensics — raw physical images, VMware .vmem, LiME, crash dumps — and how to convert them.

• A browser-based Volatility alternative

  Run Volatility-style memory forensics online — no install, no upload. ramparser is a free web Volatility alternative for Windows RAM dumps.

• pslist vs psscan vs psxview — finding hidden processes

  How memory forensics enumerates Windows processes — ActiveProcessLinks (pslist), pool scanning (psscan), and the psxview cross-view that exposes DKOM rootkits.

• Getting started

  How ramparser analyzes a RAM dump without uploading anything.