SlackBuilds Repository

15.0 > System > volatility (2.6.1)

Volatility Framework - Volatile memory extraction utility framework.

The Volatility Framework is a completely open collection of tools,
implemented in Python under the GNU General Public License, for the
extraction of digital artifacts from volatile memory (RAM) samples.

The extraction techniques are performed completely independent of
the system being investigated but offer visibilty into the runtime
state of the system. The framework is intended to introduce people to
the techniques and complexities associated with extracting digital
artifacts from volatile memory samples and provide a platform for
further work into this exciting area of research.

This requires: python2-pycrypto, python2-distorm, python2-yara

Maintained by: Barry J. Grundy
Keywords: memory,forensics,ram
ChangeLog: volatility