[Vol-users] FTK Imager as RAM dumping tool?

4 Dec 2012

      Good afternoon,

I was just looking at a memory dump that, when compressed, went from 4GB to about 20MB.
Something is odd here, I say. Most of the file is nulls.

The dump was collected with FTK Imager. Does anyone have any opinions on its reliability
as a memory acquisition tool? 

Thanks.

-David