Trufflepig Logo


See all pur­chase op­tions and fea­tures

You can also down­load sam­ple im­ages and test with them.

* All prices are with­out tax

** By Click­ing on “DOWN­LOAD NOW” or “BUY NOW” you ac­cept the gen­eral terms and con­di­tions

As there is no writ­ten doc­u­men­ta­tion avail­able at the mo­ment, we of­fer video in­tro­duc­tions to help you with the in­stal­la­tion process, the first steps, and the up­dat­ing process.


All Truf­flepig Nexus sub­scrip­tion op­tions in­clude the fol­low­ing fea­tures:

Ex­tracted Ar­ti­facts

  • Processes (User­land Mod­ules, VAD, Han­dles)
  • Threads
  • Mu­texes
  • Ker­nel Mod­ules
  • De­vices
  • Net­work Con­nec­tions
  • Files Ob­jects
  • Sym­bolic Links
  • Reg­istry (Hives, Keys & Val­ues)
  • Al­lo­ca­tions (NT-Heap Back­end & Big­Pool)
  • Win­dows Ker­nel Ob­ject Type In­for­ma­tion
  • Win­dows Ses­sions
  • Win­dows Sta­tions


  • Dash­board
  • Tab­u­lar Data for All Ar­ti­fact Types
  • Process Tree
  • De­tail View for Ar­ti­facts
  • Cross-cor­re­la­tions Be­tween Ar­ti­facts

De­vel­op­ment & Sup­port

  • Con­tin­u­ous Fea­ture Up­dates and Sta­bil­ity Im­prove­ments
  • Di­rect Sup­port From the De­vel­op­ers

Im­age For­mats

  • Win­dows 10 (par­tially also Win­dows 7 & 11) Mem­ory Im­ages
    • Raw
    • Crash Dump
    • ELF
    • VMEM
    • LiME (Ex­per­i­men­tal)

Sys­tem Re­quire­ments


  • 8 GB RAM
  • SSD Stor­age for Im­ages and Data­base (Highly Rec­om­mended)
  • Amd64 CPU Sup­port­ing AVX, AES & AES-NI In­struc­tion Sets, at Least Four Cores Rec­om­mended (In­tel, Amd)


  • 8 GB RAM
  • At Least a Full-HD Dis­play (Highly Rec­om­mended)
  • Chromium-based Browser like Chromium, Chrome, Brave, Opera, Mi­crosoft Edge (Fire­fox works par­tially)

If both the client and the server are run­ning on the same sys­tem (de­fault win­dows in­stal­la­tion) 16 GB of RAM are rec­om­mended.

More In­for­ma­tion

Truf­flepig Nexus

Truf­flepig Nexus runs on Win­dows, soon also on Linux.

No, Truf­flepig Nexus is a new mem­ory foren­sics so­lu­tion built com­pletely from scratch for per­for­mance and sta­bil­ity rea­sons.

Cur­rently Truf­flepig Nexus only of­fers a web UI. A com­mand line in­ter­face is un­der de­vel­op­ment

No, Truf­flepig Nexus can cur­rently only an­a­lyze ex­ist­ing mem­ory im­ages.

There is tech­ni­cally no limit.

We can pro­vide some test im­age files. Please con­tact our sup­port sup­port@truf­flepig-foren­

The in­stallers come pre-pack­aged

At the mo­ment, we have no sup­port for ex­ter­nal plu­g­ins. We are work­ing on it


When you sub­scribe you are charged au­to­mat­i­cally at the time of re­newal as per your sub­scrip­tion plan. For ex­am­ple, a monthly plan will re­new each month. An an­nual li­cense will con­tinue and be recharged each year. The billing date is the date of the sub­scrip­tion.

Yes, but you are re­quired to run the up­dater on an on­line sys­tem and trans­fer the up­dates man­u­ally to the of­fline sys­tem at least once within three weeks af­ter each sub­scrip­tion re­newal to al­low the li­cense to be up­dated.

The soft­ware may be in­stalled up to three de­vices but only used on one per pur­chased li­cense at a time.

Check your or­der con­fir­ma­tion emails, you will find a link to our self-ser­vice por­tal there. To log on, you have to en­ter the email ad­dress that you used when or­der­ing the prod­uct. You will then get an email con­tain­ing a lo­gin link to that ad­dress.

You can use the soft­ware as long as you are sub­scribed. If you miss to pay a sub­scrip­tion bill you will get two (for the monthly sub­scrip­tion) or four (for longer sub­scrip­tions) re­minders. If you fail to pay, your sub­scrip­tion will be can­celed and you will lose ac­cess to your soft­ware one week later.

We re­quire ac­tive sub­scribers to up­date the soft­ware at least once every sub­scrip­tion pe­riod. This is nec­es­sary to en­sure that your li­cense is up­dated and you keep ac­cess to the soft­ware.

Or­der­ing and Ful­fill­ment

Fast­spring is our mer­chant of record that han­dles all di­rect sales for us.

You will re­ceive a cus­tomized down­load link, both in the or­der com­ple­tion page and in an email that will be sent to the ad­dress that you used for plac­ing the or­der.

You fol­low the in­stal­la­tion in­struc­tions of the in­staller.

For of­fline in­stal­la­tions you are re­quired to run the up­dater on an on­line sys­tem and trans­fer the up­dates man­u­ally to the of­fline sys­tem. On on­line sys­tems the up­dater au­to­mat­i­cally up­dates the li­censed soft­ware.