Foriana is (FOrensic Ram Image ANAlyzer) input: dump of (physical) RAM output: various information Version 1.0 can list processes and modules from memory dump of i386/x86_64/arm linux/bsd kernels, and provide option for reading linear memory from dumps. Theory is described in my master thesis (english) ----- Fmem is kernel driver, that creates /dev/fmem device. /dev/fmem behave in same way that /dev/mem (direct access to physical memory), but does not have limits that /dev/mem have. It is possible to dump whole physical memory through /dev/fmem. Primary usage is for forensic analysis. Version 1.6.1 is working fine on i386, x64 and "should" work on different architectures. (feedback welcome) (original name was fdump, but there is colision with another handty tool) You may also want to check LiME - Linux Memory Extractor LiME is newer, can dump android devices, and could dump more of the memory (less kernel-userspace interaction)