How can I clone a system without leaving any footprint? I want to acquire RAM and other physical hard drives so that after cloning all the work can be done in VM without disturbing the target machine. If I install any software for cloning on the target machine I will leave a footprint. If I do something over network such as netcat, it will also leave the connection in the RAM. Also I don't want to remove the hard drive from the system and use a write blocker as it assumed that once the drive is unplugged and plugged again, the data will be wiped out.
I want to basically take a machine get all its data so that I have something to run in a VM which is exactly the same as original machine.
I am doing a project on windows forensics and as far as I have progressed I am unable to capture ram so that I can be run on a virtual machine.
I have seen some tools with which I can clone the hard disk to make a disk for virtual machine but for that I need to install that software on target machine and that would leave footprints