![]() ![]() Updated the svcscan plugin to show FailureCommand (the command that runs when a service fails to start multiple times)Īdd APIs to paged address spaces (x86 and 圆4) to allow easy lookups of PTE flags (i.e. Optimized page table enumeration and scanning algorithms, especially on 64-bit Windows 10Īdded support for carving Internet Explorer 10 history recordsĪdded support for memory dumps from the most recent VirtualBox version Either way, its an entire arsenal of plugins that you can easily extend into your existing Volatility installation.ĭownload the Volatility 2.6 Windows Standalone Executable (圆4)ĭownload the Volatility 2.6 Mac OS X Standalone Executables (圆4)ĭownload the Volatility 2.6 Linux Standalone Executables (圆4)ĭownload the Volatility 2.6 Source Code (.zip)Įnhanced support for Windows 10 (including 14393.447)Īdded new profiles for recently patched Windows 7, Windows 8, and Server 2012 ![]() ![]() Many of these are the result of the last 4 years of Volatility plugin contests, but some were just written for fun. This release also coincides with the Community repo - a collection of Volatility plugins written and maintained by authors in the forensics community. See below for a more detailed list of the changes in this version. A lot of bug fixes went into this release as well as performance enhancements (especially related to page table parsing and virtual address space scanning). This release improves support for Windows 10 and adds support for Windows Server 2016, Mac OS Sierra 10.12, and Linux with KASLR kernels. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |