Skip to content

its-radio/volatility_plugins

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 

Repository files navigation

Volatility 3 Plugins

These are plugins for the memory forensics framework Volatility 3.

Available plugins

Chrome_Hx

A Volatility 3 plugin that extracts and parses Chrome browser history from memory dumps. This plugin locates Chrome's History database files in memory, dumps them, and extracts the URLs visited by the user.

This is currently the only plugin I have availble, though I hope to publish another one soon.

Installation

Generally, you will have to copy the plugin file to the correct plugins directory in your Volatility installation directory. It will look something like this:

<VOLATILITY3_INSTALLATION_PATH>/volatility3/plugins/windows/

Requirements

  • Volatility 3
  • Python 3.6+
  • Potentially other Python libraries depending on the needs of the plugin

About

Plugins for the memory forensics framework Volatility 3

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages