The present invention provides a method for obtaining a memory state. The method comprises the following steps: at the starting point of the target running process, the program execution of the processor is suspended, the original access authority of the processor to the memory page is backed up, and the access authority of the memory page is set as no access authority; Recovering program execution of the processor, recording information of the exception handling program when entering the exception handling program due to access failure, recovering original access authority of the memory pageaccessed this time, and backing up the original memory page accessed this time if the original access authority of the memory page accessed this time is authorized to access; And copying the corresponding final memory page according to the information of the exception handler at the end of the target running process. The invention also provides a device, a system and a medium for obtaining a memory state. The embodiment of the invention can reduce the storage cost.