dfircheatsheet.github.io
RAM Acquisition Tool Comparison
Taking a snapshot instead of suspending is the preferred method for suspending a VM, leaves network connections intact, and doesn’t run VMware tools’ batch script.