Web Interface for Volatility Memory Analysis framework
Runs plugins and stores the output in a mongo database. Extracts files from plugins (that support dump-dir) and stores them in the database Search across all plugins and file content with string search and yara rules. Allows you to work on multiple images in one database
Video Demo showing some of the features. https://www.youtube.com/watch?v=ruEj94Zhn6I
See the wiki pages for detailed installation and usage details.
https://github.com/kevthehermit/VolUtility/wiki
- Volatility Foundation for writing Volatility - http://www.volatilityfoundation.org/
- Alissa Torres for teaching me memory via SANS FOR526 - https://twitter.com/sibertor
- Using volatility as a library - http://dsocon.blogspot.co.uk/2012/08/using-volatility-framework-as-library.html
- James Habben's origional eVolve concept - https://github.com/JamesHabben/evolve