pcileech

PCILeech is a versatile memory acquisition tool that leverages PCIe hardware for direct reading and writing of system memory via DMA without requiring drivers on the target system. It supports both hardware and software-based methods for memory capture, enabling access to live RAM, remote memory retrieval, and capabilities such as kernel code execution and file system access. Notable features include support for multiple memory acquisition devices, a variety of memory dump formats, and the ability to manipulate the target system, including patching and unlocking logon requirements.