When handling an incident or just doing some research, memory comes into play. Doing a forensically sound memory acquisition on a VMWare Workstation server is not hard, but there are some pitfalls and things we should be aware of.

Doing forensically sound investigations running a image live. Excellent to show what the user might have seen.