Volatility
volatilityfoundation.orgA framework for forensic memory analysis
SI 60/100
Details
A framework for forensic memory analysis
Route visiting-company activity into an owned sales follow-up
Collect forensic evidence from an administered endpoint fleet
Collect and investigate endpoint artifacts across a fleet
Correlate PCAP, Zeek logs and Suricata alerts
Extract host inventories and artifacts from packet captures
A combined network and host investigation platform
Search and hunt across Windows forensic artifacts
Defensive-security study through investigative scenarios.
Prepare forensic timeline data with log2timeline tools
Investigate forensic timelines collaboratively