Knowing what is running on RAM memory when the system is live not … RAMMap lists RAM memory processes