PassMark Software has released a beta version of┬áVolatility Workbench –┬áa graphical user interface (GUI) for the Volatility tool.┬áVolatility Workbench is free, open source and runs in Windows. It provides a number of advantages over the command line version including:

  • No need to remember command line parameters
  • Storage of the operating system profile, KDBG address and process list with the memory dump, in a .CFG file. When a memory image is re-loaded, this saves a lot of time and avoids the frustration of not knowing the correct profile to select.
  • Simpler copy & paste
  • Simpler printing of paper copies (via right click)
  • Simpler saving of the dumped information to a file on disk
  • A drop down list of available commands and a short description of what the command does
  • Time stamping of the commands executed
  • Auto-loading the first dump file found in the current folder

You can download it at OSForensics’┬áwebsite.

Load More Related Articles
Load More In Software

Leave a Reply

Your email address will not be published. Required fields are marked *