Volatility3¶ venv Memory-forensics framework for analyzing RAM captures. Location¶ /opt/detectops/threat-hunting/volatility3 How to run¶ source venv/bin/activate && vol -f memory.dmp windows.pslist Part of the Threat Hunting & Endpoint Analysis toolset in DetectOps.