Would it be possible create a device that would first plug into the ram bus and then the ram would plug in on top of it? The ram capture could them dump onto a m.2 drive that could have a machine learning program that could analyze the data to detect attacks on the computer? I imagine this being used on highly critical devices such as web servers.

Any thoughts on this would be great.

My professor and I are currently doing some research and spit balling idea and figured I'd ask the communities opinion on such a device.