# LiME

LiME is a Digital Forensics product. It runs on-premises. Pricing is free.

LiME is a Linux Memory Extractor tool for acquiring volatile memory from Linux and Linux-based devices, including Android, with features like full memory captures and minimal process footprint.

Checked October 2026.

## What is LiME?

LiME (Linux Memory Extractor) is a Loadable Kernel Module (LKM) that enables volatile memory acquisition from Linux and Linux-based devices, including Android. It is the first tool to allow full memory captures on Android devices, minimizing user-kernel space interaction for more forensically sound captures. Features include full Android memory acquisition, acquisition over network interface, minimal process footprint, and hash of dumped memory. Usage involves loading the module using the insmod command with specified arguments like path, format, and optional parameters like digest and dio.

Tags: Linux, Memory Forensics

## Where it fits in your security program (NIST CSF 2.0)

- [Respond](https://cybersectools.com/guides/building-respond-program-small-team): helps you contain and handle incidents.

## Quick facts

- Category: [Security Operations](https://cybersectools.com/categories/security-operations) · [Digital Forensics](https://cybersectools.com/categories/digital-forensics)
- Deployment: On-Premises
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 1,954
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions).

## LiME FAQ

### What is LiME?

LiME is a product in the Digital Forensics category. It covers Linux and Memory Forensics.

### What is the pricing for LiME?

LiME is free. Download and setup instructions are at https://github.com/jtsylve/LiME.

### What are alternatives to LiME?

Alternatives to LiME listed on CybersecTools:

1. [WindowsSCOPE Cyber Forensics](https://cybersectools.com/tools/windowsscope-cyber-forensics) - GUI-based memory forensic capture tool for cyber forensics and cyber crime investigation. (Commercial)
2. [Magnet Forensics](https://cybersectools.com/tools/magnet-forensics) - Digital forensics platform for evidence acquisition, analysis, and DFIR. (Commercial)
3. [Cellebrite Digital Forensics Platform](https://cybersectools.com/tools/cellebrite-digital-forensics-platform) - Digital forensics platform for mobile & endpoint evidence extraction and analysis. (Commercial)
4. [DigiStor WiebeTech](https://cybersectools.com/tools/digistor-wiebetech) - Hardware write-blockers and forensic tools for secure evidence acquisition. (Commercial)

Compare all LiME alternatives at [https://cybersectools.com/alternatives/lime](https://cybersectools.com/alternatives/lime)

### What deployment and organization size does LiME fit?

LiME is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.

## Compare LiME with similar solutions

- [LiME vs WindowsSCOPE Cyber Forensics](https://cybersectools.com/compare/lime-vs-windowsscope-cyber-forensics)
- [LiME vs Magnet Forensics](https://cybersectools.com/compare/lime-vs-magnet-forensics)
- [LiME vs Cellebrite Digital Forensics Platform](https://cybersectools.com/compare/cellebrite-digital-forensics-platform-vs-lime)

All alternatives to LiME: [/alternatives/lime](https://cybersectools.com/alternatives/lime)

---

Source: https://cybersectools.com/tools/lime

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on LiME: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md