Image:\/dd (CommandLine:of=* CommandLine:\/proc\/* CommandLine:\/mem*)