Using Hibernation for Memory Capture - AWS Security Incident Response Guide

Using Hibernation for Memory Capture

You can also use hibernation as a method of memory capture. Similar to using VMware, you can force an instance into hibernation, creating a point-in-time copy onto the primary Amazon EBS volume. Using the hibernation method also requires some pre-planning as hibernation requires certain instance types and operating systems. This hibernation method is an effective way to capture memory without a dependency on other services, like SSM, as it is API accessible. This approach allows for a fully automated and repeatable process.