Difference between revisions of "Volatility Framework"

From ForensicsWiki
Jump to: navigation, search
(Added infobox)
m (updated for latest Volatility release information)
Line 8: Line 8:
 
}}
 
}}
  
The '''Volatility Framework''' is a Python based extensible framework for conducting analysis on Windows XP Service Pack 2 memory images. It supports flat file images, crash dump files, and hibernation files. The project was originally developed by and is now headed up by [[AAron Walters]] of [[Volatile Systems]].
+
The '''Volatility Framework''' is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer unprecedented visibility into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research.  
 +
 
 +
The project was originally developed by and is now headed up by [[AAron Walters]] of [[Volatile Systems]].
  
 
== See Also ==
 
== See Also ==
Line 15: Line 17:
 
== External Links ==
 
== External Links ==
 
* [https://www.volatilesystems.com/default/volatility Official web site]
 
* [https://www.volatilesystems.com/default/volatility Official web site]
 +
* [http://code.google.com/p/volatility/ Code repository]
 +
* [http://code.google.com/p/volatility/w/list Volatility Documentation]

Revision as of 10:31, 26 October 2011

Volatility
Maintainer: AAron Walters
OS: Cross-platform
Genre: Memory analysis
License: GPL
Website: https://www.volatilesystems.com/

The Volatility Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer unprecedented visibility into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research.

The project was originally developed by and is now headed up by AAron Walters of Volatile Systems.

See Also

External Links