I’d enjoy building a software tool, to be run from a CD or USB drive, which takes a snapshot of the current live system by means of local exploits that allow access to executive memory. This would be worth big $ for law enforcement and intelligence agencies that want to capture a running computer image with all of its cryptographic keys in place, without shutting anything down.