Volatility Framework

From ForensicsWiki
Revision as of 14:50, 15 January 2009 by Jessek (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The Volatility Framework is a Python based extensible framework for conducting analysis on Windows XP Service Pack 2 memory images. It supports flat file images, crash dump files, and hibernation files. The project was originally developed by and is now headed up by AAron Walters of Volatile Systems.

See Also

External Links