AVML
A portable volatile memory acquisition tool for Linux that captures memory images without requiring target OS or kernel knowledge.
What is AVML?
AVML is a volatile memory acquisition tool specifically designed for Linux systems that captures memory images for forensic analysis. It solves the problem of acquiring memory from diverse Linux distributions and kernel versions without requiring prior knowledge of the target environment or on-target compilation. The tool provides a portable static binary that can capture memory from multiple sources and optionally upload directly to cloud storage.
Digital forensic investigators, incident response teams, security researchers, and malware analysts who need to capture volatile memory from Linux systems during security investigations.
Developers choose AVML because it provides a reliable, zero-dependency memory acquisition solution that works across numerous Linux distributions without requiring kernel modules or complex setup. Its cloud upload capabilities and LiME format compatibility make it particularly valuable for modern forensic workflows.
Overview
AVML - Acquire Volatile Memory for Linux
Use Cases
Best For
- Incident response investigations on Linux servers
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
