Volatility plugins developed and maintained by the community

Run several volatility plugins at the same time

volatility explorer

Volatility Explorer Suit

PS / Bash / Python / Other scripts For FUN!

Volatility Framework plugin to detect various types of hooks as performed by banking Trojans

A Volatility plugin for finding sqlite database rows

Learning volatility plugins.

Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

A suite of Volatility 3 plugins for memory forensics of Docker containers

A tool to automate memory dump processing using Volatility, including optional Splunk integration.

Volatility 3 plugins to extract a module as complete as possible

Volatility plugin to search for all Autostart Extensibility Points (AESPs)

Volatility plugin to calculate and compare Windows processes fuzzy hashes

Volatility plugin to retrieve namespaces and relative processes from a memory dump.

Volatility plugin to detect malicious code thanks to ClamAV

GLASS (Global Language And Site Scanner) is a Volatility plugin designed by Clayton Wenzel, James Baumhardt, and Nathan Eberly, aiming to swiftly identify and classify malicious domains and unexpected languages within a memory dump, providing users with dynamic insights for forensic investigations.

Volatility plugins to recover ML model attributes from memory images