LEMON

Summary from the TLDR InfoSec newsletter

LEMON is a Linux memory dump tool that utilizes eBPF to capture the entire physical memory of a system and save it in LiME format, compatible with forensic tools like Volatility 3. Currently, LEMON supports only CO-RE kernels and on-disk memory dumps.