$ 0 0 In fact, I do. Check out http://forensic.belkasoft.com/en/live-ram-forensics , and if you find it useful, PM me for PowerPont slides.