Reading Files Loaded into Memory (Outlook / VSTO) - Windows hooks / hooking, desktop applications

MS Office files are loaded into memory from an MS Office add-in; specifically Outlook and the attachments.

When a file is loaded into memory, read it, and save it to disk.

Example: a file is loaded into a byte array. Many APIs, etc., accept byte arrays. So, if a file is loaded into memory, theoretically, if another application were watching / listening, it could read these bytes and save the file.

https://stackoverflow.com/questions/32386948/is-there-a-way-to-read-or-see-the-files-or-information-stored-in-ram-in-a-comput

and also referenced in the above:

https://security.stackexchange.com/questions/10643/recover-the-prior-contents-of-ram-from-a-turned-off-pc

and specifically mentions reading another process' memory.

Imagine a file gets loaded into a byte array in its entirety. This, technically, could be accessed or found.

I need a solution that does this so that I can demonstrate a security issue to my organization.

For working with Outlook attachments:

https://www.codeproject.com/articles/1041042/extracting-attachments-from-outlook-mailboxes-usin

https://www.codeproject.com/Articles/19137/Outlook-Attachment-Extractor

https://www.codeproject.com/Articles/32899/Reading-an-Outlook-MSG-File-in-C

https://www.add-in-express.com/creating-addins-blog/2015/01/23/working-outlook-attachments-programmatically/

https://stackoverflow.com/questions/9339146/getting-attachments-from-outlook

There are many code samples...

In our case, we would load an attachment file into a byte array.

I need to demonstrate that this can be read and saved.

It could be another add-in project that reads the memory and saves it out to a file or it could be a separate, standalone application. Your choice.