Volatility 2.0 – Advanced Memory Forensics [With Video Demonstration] The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer unprecedented visibilty into the system’s runtime state. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts and provide a platform for further work into this exciting area of research. Volatile Systems is committed to the belief that the technical procedures used to extract digital evidence should be open to peer analysis.
Source: https://thehackernews.com/2011/10/volatility-20-advanced-memory-forensics.html