aboutsummaryrefslogtreecommitdiff
path: root/system/volatility3/README
diff options
context:
space:
mode:
authorBarry J. Grundy <bgrundy AT linuxleo.com>2022-05-12 17:52:54 +0100
committerWilly Sudiarto Raharjo <willysr@slackbuilds.org>2022-05-14 19:27:59 +0700
commit23d779c2186498872390742bf3c0f28a6fa86699 (patch)
tree9f4bbc86d660fc03286c140a87b7622899319948 /system/volatility3/README
parentf39578d5381b1afbe6eaeddd4813aeb3b9640d7d (diff)
system/volatility3: Added (memory extraction utility framework.)
Signed-off-by: Dave Woodfall <dave@slackbuilds.org> Signed-off-by: Willy Sudiarto Raharjo <willysr@slackbuilds.org>
Diffstat (limited to 'system/volatility3/README')
-rw-r--r--system/volatility3/README18
1 files changed, 18 insertions, 0 deletions
diff --git a/system/volatility3/README b/system/volatility3/README
new file mode 100644
index 0000000000000..84e96b75a43a4
--- /dev/null
+++ b/system/volatility3/README
@@ -0,0 +1,18 @@
+Volatility Framework - Volatile memory extraction utility framework.
+
+Volatility is the world's most widely used framework for extracting
+digit artifacts from volatile memory (RAM) samples. The extraction
+techniques are performed completely independent of the system being
+investigated but offer visibility into the runtime state of the system.
+The framework is intended to introduce people to the techniques and
+complexities associated with extracting digital artifacts from volatile
+memory samples and provide a platform for further work into this
+exciting area of research.
+
+In 2019, the Volatility Foundation released a complete rewrite of the
+framework, Volatility3.
+
+The following are optional dependancies:
+ - capstone
+ - jsonschema
+