A method includes detecting an event occurring on a vehicle. The vehicle includes at least one computing device that controls at least one operation of the vehicle. The at least one computing device includes a first computing device comprising system memory. In response to detecting the event, data is downloaded from the system memory to a non-volatile memory device of the vehicle. In some cases, a control action for the vehicle is implemented based on analysis of the downloaded data.