Perform Linux memory forensics with this open source tool: 
A computer’s operating system and applications use the primary memory (or RAM) to perform various tasks. This volatile memory, containing a wealth of information about running applications, network connections, kernel modules, open files, and just about everything else is wiped out each time the computer restarts.
read more: Opensource.com gkamathe
Supporting Open Source.
Have you tried: Diving with Sharks?
