Volatility: The volatile memory forensic extraction framework(github.com)

39 pointsby transpute5 เดือนที่ผ่านมา3 comments

Volatility: The volatile memory forensic extraction framework

https://github.com/volatilityfoundation/volatility3

4 comments

c0nsumer5 เดือนที่ผ่านมา

Outside of security stuff, over the years I've found this really handy for troubleshooting as well. Being able to extract detailed process info, screenshots, and a bunch of other things from a memory dump have allowed me to get a better idea of what a user was doing when a Windows BSOD occurred.

It builds more a nice picture of what was going on when paired with the users description. Or sometimes, depending on the user, you just don't have anything else to go on besides "it crashed".

aufklarer5 เดือนที่ผ่านมา

halfhack5 เดือนที่ผ่านมา

Whashodi?

m-s-y5 เดือนที่ผ่านมา

It’s a fantastic project, but what’s the benefit of posting this here, today?

There’s no context other than the link to the GitHub project. And it’s not like this is remotely new…?