Unclaimed project
Are you a maintainer of WinPmem? Claim this project to take control of your public changelog and roadmap.
Changelog
The multi-platform memory acquisition tool.
Last updated 10 months ago
This release fixes an issue with the drivers loading on recent Windows versions.
For this release we make available the old "mini" pmem imager based on the old 1.6 branch. This imager is very simple - it can only make raw images. The AFF4 based imager may be back in the future but for now we can produce RAW images.
We started to distribute Winpmem releases directly from this project as it is now separated from the Rekall project (which has been discontinued).
The new drivers implement Fast IO mode so should be faster than before.
There is now also an experimental Go userspace imager which supports 3 methods of compression (Snappy, S2 and Gzip). Use the -h flag to see usage instruction.
For production use please use the go-winpmem_amd64_1.0-rc2_signed.exe binary below which contains the old drivers using the new Golang userspace program. Unfortunately we do not have the possibility of signing the new drivers so for the foreseeable future this remains the only version available for production use.
We would like to thank Emre Tinaztepe and Mehmet GÖKSU at Binalyze as well as Viviane Zwanger for making this release possible.
Display and control your Android device
Microsoft PowerToys is a collection of utilities that supercharge productivity and customization on Windows
A new bootable USB solution.
For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.