Volatility (memory forensics)

Volatility (memory forensics)
Stable release 2.4 / August 1, 2014 (2014-08-01)
Website github.com/volatilityfoundation/volatility

Volatility is an open source memory forensics framework for incident response and malware analysis. It is written in Python and supports Microsoft Windows, OS X, and Linux (as of version 2.4[1]).

Volatility was created by computer scientist and entrepreneur Aaron Walters, drawing on academic research he did in memory forensics.[2][3]

References

  1. ↑ http://www.volatilityfoundation.org/#!24/c12wa
  2. ↑ Petroni, N. L., Walters, A., Fraser, T., & Arbaugh, W. A. (2006). FATKit: A framework for the extraction and analysis of digital forensic data from volatile system memory. Digital Investigation, 3(4), 197-210.
  3. ↑ Walters, A., & Petroni, N. L. (2007). Volatools: Integrating Volatile Memory into the Digital Investigation Process. Black Hat Briefings DC 2007, 1-18.
This article is issued from Wikipedia - version of the Sunday, January 04, 2015. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.