Skip to content

AVML

Forensics & Incident Response

A portable X86_64 userland tool for acquiring volatile memory on Linux without prior OS or kernel knowledge

Track releases GitHub
Rust Latest v0.18.0 · 14d ago Security brief →

Features

  • Acquire memory from /dev/crash, /proc/kcore, or /dev/mem automatically
  • Optional Snappy compression of captured images
  • Upload to Azure Blob Store with automatic retry and exponential backoff
  • Supports HTTP PUT upload to arbitrary URLs
  • Can delete the local image after successful remote upload

Recent releases

View all 2 releases →
Upgrade now
v0.18.0 Maintenance
Dependencies Breaking upgrade

Routine maintenance and dependency updates.

Open
v0.17.0 Maintenance

Memory acquisition tool updates dependencies across Rust ecosystem including clap, tokio, openssl, and various security libraries; fixes memory alignment on non-memory sources and HTTP success status handling.

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
1,094
Forks
90
Languages
Rust Shell
View on GitHub

Install & Platforms

Platforms
linux

Similar tools

LiME

Beta — feedback welcome: [email protected]