Simplifying RAM Forensics : A GUI and Extensions for the Volatility Framework
- The Volatility Framework is a collection of tools for the analysis of computer RAM. The framework offers a multitude of analysis options and is used by many investigators worldwide. Volatility currently comes with a command line interface only, which might be a hinderer for some investigators to use the tool. In this paper we present a GUI and extensions for the Volatility Framework, which on the one hand simplify the usage of the tool and on the other hand offer additional functionality like storage of results in a database, shortcuts for long Volatility Framework command sequences, and entirely new commands based on correlation of data stored in the database.
| Author: | Steffen Logen, Hans Höfken, Marko SchubaORCiD |
|---|---|
| DOI: | https://doi.org/10.1109/ARES.2012.12 |
| ISBN: | 978-1-4673-2244-7 |
| Parent Title (English): | 2012 Seventh International Conference on Availability, Reliability and Security (ARES), 20-24 August 2012, Prague, Czech Republic |
| Publisher: | IEEE |
| Place of publication: | New York |
| Document Type: | Conference Proceeding |
| Language: | English |
| Year of Completion: | 2012 |
| Date of the Publication (Server): | 2012/12/18 |
| First Page: | 620 |
| Last Page: | 624 |
| Link: | https://doi.org/10.1109/ARES.2012.12 |
| Zugriffsart: | campus |
| Institutes: | FH Aachen / Fachbereich Elektrotechnik und Informationstechnik |
| collections: | Verlag / IEEE |
| Licence (German): |  Urheberrechtlich geschützt |
