Volatility 3 — the rewritten RAM analysis framework. No more profiles, new linux.* plugin syntax, installation, and a practical incident analysis example.
Posts for: #Incident Response
Volatility — Linux RAM Forensics and Analysis
Introduction to Volatility — a framework for analyzing RAM dumps. Profiles, plugins, and a practical example of analyzing a compromised Linux server.