Use volatility and it's plugin's to inspect the dump

Original writeup (https://amritabi0s.wordpress.com/2017/09/24/sec-t-ctf-g1bs0n-writeup/).