Volatility Framework

From Forensics Wiki
Revision as of 13:50, 15 January 2009 by Jessek (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The Volatility Framework is a Python based extensible framework for conducting analysis on Windows XP Service Pack 2 memory images. It supports flat file images, crash dump files, and hibernation files. The project was originally developed by and is now headed up by AAron Walters of Volatile Systems.

See Also

External Links