This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
The Volatility Framework is a Python based extensible framework for conducting analysis on Windows XP Service Pack 2 memory images. It supports flat file images, crash dump files, and hibernation files. The project was originally developed by and is now headed up by AAron Walters of Volatile Systems.