Skip to content

Volatility3

venv

Memory-forensics framework for analyzing RAM captures.

Volatility3 screenshot

Location

/opt/detectops/threat-hunting/volatility3

How to run

source venv/bin/activate && vol -f memory.dmp windows.pslist

Part of the Threat Hunting & Endpoint Analysis toolset in DetectOps.