Good morning everyone,
Does anyone know of a RAM analysis tool that will work with Windows RAM capture from a 1909 build?
I have tried Volatility 3.0, but to no avail.
Good question. Even Volatility 2 does not have a profile for it.
You could try Volexity, the commercial platform at
Andrew Case and his team are very responsive and I bet they are already working on a possibility to analyze 1909 versions. You could also simply ask him on Twitter.
That would be my approach.