Description
This is an ExpressCard device capable of imaging the physical memory of the computer it’s connected to. Creates dump files in the standard WinDD format that can be used with WindowsSCOPE Cyber Forensics Ultimate or with other WinDD compatible dump analysis tools. Connects directly to the physical memory to read contents. Requires a small CaptureGUARD driver to be installed on the system for the device to be recognized and to store memory contents to file.
Operates on systems running Windows XP, Windows Vista, Windows 7 and Windows 8/8.1 that contain an ExpressCard-34 hotplug slot. For other operating systems or system configurations contact support@windowsscope.com
CaptureGUARD Specification Documents:
