volatilityfoundation/volatility
View on GitHub ↗ ★ 8,055 Python archived
An advanced memory forensics framework
7 mentions on Hacker News by 7 people: 2 stories, 5 comments · first 2014-12-16 · latest 2020-05-18
20082026
-
Exactly this. Much like the Volatility Framework's psscan[1] module. [1] https://github.com/volatilityfoundation/volatility/wiki/Comm...
comment by jeffmcjunkin · 2020-05-18 · in How to Use Trend Micro's Rootkit Remover to Install a Rootkit -
…containing the config file (so long as you know some of the strings in it). Hope this helps! [0] https://github.com/volatilityfoundation/volatility [1] https://www.andreafortuna.org/2017/07/10/volatility-my-own-c...
comment by sdmike1 · 2020-01-16 · in Ask HN: Ever worked with a service that can never be restarted? -
…into because it requires in depth knowledge of operating systems. I'd play around with volatility https://github.com/volatilityfoundation/volatility . Next take a look at getting good with IDA, it's expensive but they have freeware…
comment by k4ch0w · 2019-07-10 · in Ask HN: How to get into low level system security? -
…look like there's that much open source available for the new-ish Windows 8+ hibernation file: https://github.com/volatilityfoundation/volatility/issues/25
comment by j_s · 2017-02-10 · in iCloud was storing cleared browsing histories -
If you can dump the VMs "physical memory" - even from an AWS VM, e.g. using the LiME kernel module ( https://github.com/volatilityfoundation/volatility/wiki/Lime... ) you can still use Volatility and I believe libvmi as well to get some…
comment by drvdevd · 2016-10-23 · in LibVMI: virtual machine introspection