Volatility 3

Description: The reference framework for memory forensics, rewritten for Python 3. It analyses a RAM image for running processes, network connections, injected code and cached credentials, which is often the only evidence left once malware has removed its files. Released under the Volatility Software License.

Subcategory: Forensic Analysis Tools

License: free

URL: Volatility 3