Volatility plugins developed and maintained by the community

Run several volatility plugins at the same time

volatility explorer

Volatility Explorer Suit

PS / Bash / Python / Other scripts For FUN!

Volatility Framework plugin to detect various types of hooks as performed by banking Trojans

A Volatility plugin for finding sqlite database rows

Learning volatility plugins.

Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

A suite of Volatility 3 plugins for memory forensics of Docker containers

A tool to automate memory dump processing using Volatility, including optional Splunk integration.

Volatility 3 plugins to extract a module as complete as possible

Volatility plugin to search for all Autostart Extensibility Points (AESPs)

Volatility plugin to calculate and compare Windows processes fuzzy hashes

Volatility plugin to retrieve namespaces and relative processes from a memory dump.

Volatility plugin to detect malicious code thanks to ClamAV

Volatility plugin to obtain the number of the resident memory pages per module (exe or dll) and per driver from a Windows memory dump.

Volatility plugin to yield and compare similarity digest of modules on execution.