基于Memprocfs和Volatility的可视化内存取证工具
-
Updated
Aug 12, 2025 - Python
#
volatility3
Here are 31 public repositories matching this topic...
Project containing several tools/ scripts to recover the OpenSSH session keys used to encrypt/ decrypt SSH traffic.
-
Updated
May 22, 2024 - Python
Volatility3 Linux profiles
symbols forensics centos7 centos6 volatility ubuntu16 centos8 ubuntu18 ubuntu20 volatility3 ubuntu22 almalinux8 almalinux9
-
Updated
Jun 27, 2025 - Dockerfile
Volatility, on Docker 🐳
-
Updated
Aug 12, 2025 - Dockerfile
Generate Volatility3 profiles from BTF.
-
Updated
Dec 21, 2024 - Rust
PyDFIRRam is a Python library leveraging Volatility 3 to simplify and enhance memory forensics. It streamlines the research, parsing, and analysis of memory dumps, allowing users to focus on data rather than commands.
-
Updated
Sep 17, 2024 - Python
Skalle is a handy add-on for Volatility that lets you run it in a graphical user interface. It also adds some cool features!
-
Updated
May 30, 2025 - Python
A suite of Volatility 3 plugins for memory forensics of Docker containers
-
Updated
Jan 10, 2024 - Python
Volatility 3 plugins to extract a module as complete as possible
-
Updated
Jun 13, 2023 - Python
Linux BPF plugins for Volatility3
-
Updated
Jan 19, 2024 - Python
My Linux profiles built for Volatility 2/3
ram memory fedora forensics rhel volatility memory-forensics volatility-framework volatility-profiles volatility3
-
Updated
Oct 16, 2024
Linux symbols creation tool for Volatility3
-
Updated
Oct 2, 2022 - Shell
Container to use the dwarf2json tool to generate Linux Profiles based on CentOS7 for Volatility3.
-
Updated
Jan 15, 2021 - Dockerfile
GLASS (Global Language And Site Scanner) is a Volatility plugin designed by Clayton Wenzel, James Baumhardt, and Nathan Eberly, aiming to swiftly identify and classify malicious domains and unexpected languages within a memory dump, providing users with dynamic insights for forensic investigations.
-
Updated
Apr 19, 2024 - Python
PsXview plugin for volatility3 by MY7H404 - Find hidden processes with various process listings
-
Updated
Jul 27, 2024 - Python
Docker container to run volatility3
-
Updated
Jan 18, 2021 - Dockerfile
MCP (Model Context Protocol) interface for Volatility 3, providing memory forensics capabilities through LLM-based tools. Query, analyze, and automate Volatility 3 plugins using natural language via API or agent-based workflows
python3 volatility memory-forensics volatility-framework volatility3 agentic-ai mcp-server mcp-tools fastmcp
-
Updated
May 20, 2025 - Python
A Volatility3 plugin to ask chatGPT
-
Updated
May 17, 2023 - Python
Improve this page
Add a description, image, and links to the volatility3 topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the volatility3 topic, visit your repo's landing page and select "manage topics."