“LiME (or Linux Memory Extractor) is a tool that allows the
capture of volatile memory (RAM) from a running Linux device. It is
the first tool of its type that also supports memory capture from
Android devices. Forensics memory analysis is vital to
investigations as volatile memory contains a wealth of information
that is otherwise unrecoverable. Lack of such information can make
certain investigative scenarios impossible, such as when performing
incident response or analyzing advanced malware that does not
interact with non-volatile storage.