Skip to content

Volatility 3 2.4.0

Compare
Choose a tag to compare
@ikelos ikelos released this 14 Dec 20:10
· 1400 commits to develop since this release
2b46e97

For the 2.4.0 release, the major version has jumped a few numbers for compatibility, but this is the next release including the following:

  • New plugins
    • linux.mountinfo
    • linux.psaux
    • windows.devicetree
    • windows.joblinks
    • windows.ldrmodules
    • windows.mbrscan
    • windows.mftscan
    • windows.sessions
  • Introduced the concept of modules and module requirements
  • Unified symbol handling and ISF file caching between OS versions
  • Better QEVM support (fixed the QEMU PCI hole)
  • Exposed an API for automatic PDB symbol table use
  • Improved contributed documentation
  • Various bug fixes and changes across the codebase