Process Dumper
Process Dumper is able to make a dump of a running process in a forensical manner.
Features
* dumps the whole process space (all data and code mappings)
* uses meta information to describe the different mappings (needed for advanced analysis)
* also saves the process environment and state
* outputs to stdout, so its possible to combine it with other tools (netcat etc.)
* doesn't touch the harddisk at all
Download
The Process Dumper is freeware but not open source.
Get the latest Windows version (2006/07/14, version 1.1)
Get the latest Linux version (2006/07/14, version 1.1)
Documentation
References
The utility Memory Parser (MMP) can be used to analyse process dumps made with pd.