RAM/Volatility Lab Notes

• vol.exe has lots of options to scrape the memory image for useful information on the system
• RAM dumps aren't the whole system disk 😞