10.23721/100/17538
External Data Source
Volatility
IMPACT
2018
en
volatility, 1300, external, inferlink corporation, source, inferlink, corporation, external data source, memory, framework, forensics, advanced, extraction, completely, techniques, system, samples, volatile, digital, artifacts, gnu, public, exciting, intended, complexities, other, provide, implemented, independent, investigated, license, python, ram, people, performed, offer, runtime, extracting, tools, platform, introduce, visibility
17538
1300
Volatility is an advanced memory forensics framework.
The Volatility Framework is a completely open collection of tools,implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples.The extraction techniques are performed completely independent of the system being investigated but offer visibility into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research.