drop a process memory dump · extract strings · urls · ips · credentials patterns · loaded modules · network connections · runs locally
drop dump
Drop memory image (.dmp · .mem · .bin · .raw)
first 28 MiB scanned for strings/IOCs — full file parsed for MDMP streams
status
drop .dmp · .mem · or raw capture