AVML
Forensics & Incident ResponseA portable X86_64 userland tool for acquiring volatile memory on Linux without prior OS or kernel knowledge
Features
- Acquire memory from /dev/crash, /proc/kcore, or /dev/mem automatically selecting a functional source
- Save images locally with optional Snappy compression
- Upload directly to Azure Blob Storage using SAS URLs with retry and exponential backoff
- Stream memory to HTTP endpoints or Azure without writing to disk
- Convert between AVML, LiME, and raw formats
Recent releases
View all 4 releases →
Upgrade now
v0.18.0
Maintenance
Dependencies
Breaking upgrade
Routine maintenance and dependency updates.
v0.17.0
Maintenance
Memory acquisition tool updates dependencies across Rust ecosystem including clap, tokio, openssl, and various security libraries; fixes memory alignment on non-memory sources and HTTP success status handling.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Platforms
linux