From the course: Complete Guide to Cybersecurity: A Practical Approach

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Exploring memory analysis with Volatility

Exploring memory analysis with Volatility

From the course: Complete Guide to Cybersecurity: A Practical Approach

Start my 1-month free trial Buy for my team

Exploring memory analysis with Volatility

“

- Let's go over the volatility framework. And basically what this is is an open-source collection of tools and libraries that will provide you with a way to extract and analyze different artifacts from RAM. And that, of course, will help you to perform different forensic analysis on a specific system. A lot of people use this for malware analysis, and, of course, for digital forensics. You can download it from the GitHub repository that I have in the screen here. And, of course, you can also access the documentation at this link that I'm highlighting in this screen. One of the cool things about volatility is basically that it supports all major operating systems, including Windows, Linux, and macOS X. It also allows you to examine running processes, network connections, any open files that you had, or that the machine actually had whenever you dump memory. And registry keys, in the case of Windows. And any data that you can extract from RAM at the moment that you collected the…

Contents