Physical Memory Analysis with the LiME Linux Memory Extractor

The LiME Loadable Kernel Module allows digital investigators to perform physical memory analysis on Linux and Linux-based devices such as Android smartphones. LiME could capture currently running and previously terminated apps, for example, and the IP addresses of other devices to which it has connected. In this Linux.com interview, Joe Sylve, a Senior Security Researcher at Digital Forensics Solutions, explains what LiME is and how it works.


https://www.linux.com/learn/tutorials/565969:physical-memory-analysis-with-the-lime-linux-memory-extractor