A quick way to search the entire file for readable text.

Determine what operating system the memory came from to ensure tool compatibility. vol.py -f battleofhooverdam.raw imageinfo 2. Check Running Processes

vol.py -f battleofhooverdam.raw --profile=[PROFILE] pslist 3. Inspect Network Connections