An advanced memory forensics framework

Volatility 3.0 development

Powerful plugins and add-ons for hackers

Volatility plugins developed and maintained by the community

The Volatility Collaborative GUI

volatility explorer

Volatility Explorer Suit

PS / Bash / Python / Other scripts For FUN!

Volatility Framework plugin to detect various types of hooks as performed by banking Trojans

Volatility, on Docker 🐳

A tool to automate memory dump processing using Volatility, including optional Splunk integration.

The ultimate streamline for Volatility 3. Speed up process of memory artifacts extraction phase

My Linux profiles built for Volatility 2/3

DigDog-基于深度学习和内存取证技术的恶意软件检测框架

Tools related to Volatility

Dumpalyzer is a bash script whose purose is to analyze Memory and HDD files, forensically extract them with five different tools in an interactive mode, and output organized log files.

Linux symbols creation tool for Volatility3

Hands-on lab for memory forensics on Linux using Volatility, covering memory dump analysis, process investigation, network connections, hidden data, malware detection, and browser artifacts extraction.

GLASS (Global Language And Site Scanner) is a Volatility plugin designed by Clayton Wenzel, James Baumhardt, and Nathan Eberly, aiming to swiftly identify and classify malicious domains and unexpected languages within a memory dump, providing users with dynamic insights for forensic investigations.

Volatility plugins to recover ML model attributes from memory images