Belkasoft RAM Capturer is a kernel-mode tool designed to capture the content of the computer's volatile memory in a forensically sound way. Developed by a forensic research company, Belkasoft RAM Capturer requires no installation and leaves as small a footprint as theoretically possible. Coming with 32-bit and 64-bit kernel-mode drivers, Belkasoft RAM Capturer is able to overcome most current anti-debugging and anti-dumping protection systems such as nProtect GameGuard. Unlike many other memory dumping tools operating strictly in user mode, Belkasoft RAM Capturer works in the system's most privileged kernel mode, being able to acquire the full content of the computer's RAM.

Certain applications, including multi-player computer games, communication tools, and malware implement anti-debugging measures to actively block third-party tools from accessing their memory sets. In mild, best-case scenarios these proactive measures will simply cause the memory dumping tool to read zeroes (or random data) instead of the actual information. In other cases (e.g. malware, Trojans, certain security applications), such systems may lock up or reset the PC, thus destroying the content of the volatile memory and making it absolutely impossible to dump RAM contents. Examples of such anti-debugging systems include nProtect GameGuard and the game of Karos.

Many forensic RAM acquisition tools will operate in the least privileged user mode, triggering these protection systems and serving no good to their users. Unlike many competing tools running in system's user mode, Belkasoft RAM Capturer comes equipped with 32-bit and 64-bit kernel drivers allowing the tool to operate in the most privileged kernel mode.

Belkasoft RAM Capturer leaves the smallest footprint possible, does not require installation and can be launched in seconds from a USB flash drive. Memory dumps acquired with Belkasoft RAM Capturer can be then analyzed with Belkasoft Evidence Center Live RAM Analysis.

• Belkasoft Evidence Center 2012
  Extract digital evidence from suspects' hard drives. Recover hidden and destroyed evidence with Data Carving. Extract difficult to recover artifacts with Live RAM analysis....

• Belkasoft Screen Capturer 1.01
  Belkasoft Screen Capturer is the powerful tool for easy screen shots creation, which allows you to make screen shot for entire screen, particular window, selected region etc

• Belkasoft Screen Capturer Pro 2.01
  Belkasoft Screen Capturer Pro is the powerful tool for easy screen shots creation, which allows you to make screen shot for entire screen, particular window, selected region etc

• Belkasoft BookaMark 2.04
  Organize and manage your bookmarks easily with Belkasoft BookaMark!Search them by different criteria, find duplicates, export and import fromICQ/Miranda history, XML, major browsers, handle MSDN links, bind shortcuts to frequenlty used bookmarks

• Belkasoft RemovEx 1.01
  Belkasoft RemovEx allows you to remove so-called Shell Extensions (Windows Explorer and Internet Explorer Extensions)

• Belkasoft LinksManager 1.01d
  Organize and manage your bookmarks easily with Belkasoft LinksManager!Search them by different criteria, find duplicates, export and import fromXML and IE favorites, handle MSDN links, bind shortcuts to frequenlty used links

• Belkasoft Forensic IM Extractor 3.01
  Tool for e-crime/forensic professionals that eases their work on analysing Internet Messengers histories

• Belkasoft RemovEx Pro 2.01
  Belkasoft RemovEx Pro allows you to remove so-called Shell Extensions (Windows Explorer and Internet Explorer Extensions)

• Belkasoft &RQ History Extractor 1.01
  Lost in your &RQ history? Not a problem any more! Belkasoft &RQ History Extractor allows you to extract your history into such formats as plain text, HTML and XML

• Belkasoft ICQ plugin for GDS 1.01
  The product indexes your ICQ history with Google Desktop Searchthus enabling you to use amazingly powerful search facilities GDS provides