WinPmem

参考链接：

GitHub - ReversecLabs/physmem2profit: Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotelyGitHub