Volatility Framework
From Forensics Wiki
The Volatility Framework is a Python based extensible framework for conducting analysis on Windows XP Service Pack 2 memory images. It supports flat file images, crash dump files, and hibernation files. The project was originally developed by and is now headed up by AAron Walters of Volatile Systems.