ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.
|Maintainer:||AAron Walters and Nick Petroni|
|Genre:||Windows Memory Analysis|
The Volatools suite is a set of tools by Komoku for conducting memory analysis. The current version, Volatools Basic, can process images from Windows XP Service Pack 2 systems. A forthcoming version Volatools Professional should be able to process images from more platforms. Although the Volatools are written in Python and are therefore cross-platform, they require the Pykvm library that is only available for Windows.
Volatools Basic was first released at the Blackhat Federal conference in February 2007. The professional version and an acquisition product, Komoku Acquisition Suite are scheduled to be released in 2007.