ESXi / VMware Workstation snapshots

Snapshots generate .vmem and .vmsn files
Suspended VMs commit memory to .vmem and .vmss files
These are both required in the operating directory when using Volatility for analysis.