WinDD

From Forensics Wiki
Jump to: navigation, search

40px-Ambox warning pn.png

This tool is deprecated.
The tool that this page describes is deprecated and is no longer under active development.
Further information might be found on the discussion page.

WinDD
Maintainer: Matthieu Suiche
OS: Windows
Genre: Memory Imaging
License: GPL
Website: windd.msuiche.net/

WinDD is actually a set of Windows physical memory dumpers for both 32- and 64-bit Windows.

Win32dd is included on the Helix Live CD response tool.

WinDD has be deprecated in favor of MoonSols Windows Memory Toolkit as the project site indicates "Win32dd is so 2008 !".

External Linkes