cp /dev/mem /tmp/mem
strings /tmp/mem | grep keyword