volatility

v 2.6.1 Updated: 1 year, 10 months ago

collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples

The Volatility Framework is a completely open collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer unprecedented visibilty into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research.

http://www.volatilityfoundation.org/

To install volatility, paste this in macOS terminal after installing MacPorts

sudo port install volatility

Add to my watchlist

Installations 1
Requested Installations 1