Collecting and analyzing RAM on a Mac is, not surprisingly, different than it is on a Windows machine. Tools like MacQuisition can assist examiners in acquiring RAM from Mac computers. Analysing a Windows machine running a live memory capture is fairly easy; as long as the user has logged in as an administrator, a memory capture tool can be run. In order to access RAM on a Mac, examiners need to enter the administrator’s password, regardless of who is logged in to the computer.