LiME
LiME is a Linux Memory Extractor tool for acquiring volatile memory from Linux and Linux-based devices, including Android, with features like full memory captures and minimal process footprint.
LiME is a Linux Memory Extractor tool for acquiring volatile memory from Linux and Linux-based devices, including Android, with features like full memory captures and minimal process footprint.
Checked October 2026.
LiME (Linux Memory Extractor) is a Loadable Kernel Module (LKM) that enables volatile memory acquisition from Linux and Linux-based devices, including Android. It is the first tool to allow full memory captures on Android devices, minimizing user-kernel space interaction for more forensically sound captures.
Features include full Android memory acquisition, acquisition over network interface, minimal process footprint, and hash of dumped memory. Usage involves loading the module using the insmod command with specified arguments like path, format, and optional parameters like digest and dio.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about LiME: features, pricing and alternatives.
LiME is a product in the Digital Forensics category. It covers Linux and Memory Forensics.
LiME is free. Download and setup instructions are at https://github.com/jtsylve/LiME.
Alternatives to LiME listed on CybersecTools:
Compare all LiME alternatives at https://cybersectools.com/alternatives/lime
LiME is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A library to access and manipulate RAW image files.
A library and tools to access and manipulate VMware Virtual Disk (VMDK) files.
A library and tools for accessing and analyzing Linux Logical Volume Manager (LVM) volume system format.
Python tool for remotely or locally dumping RAM of a Linux client for digital forensics analysis.
A dynamic GUI for advanced log analysis, allowing users to execute SQL queries on structured log data.
A tool for advanced HTTPD logfile security analysis and forensics, implementing various techniques to detect attacks against web applications.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
