Volatility 3 2.4.0
For the 2.4.0 release, the major version has jumped a few numbers for compatibility, but this is the next release including the following:
- New plugins
- linux.mountinfo
- linux.psaux
- windows.devicetree
- windows.joblinks
- windows.ldrmodules
- windows.mbrscan
- windows.mftscan
- windows.sessions
- Introduced the concept of modules and module requirements
- Unified symbol handling and ISF file caching between OS versions
- Better QEVM support (fixed the QEMU PCI hole)
- Exposed an API for automatic PDB symbol table use
- Improved contributed documentation
- Various bug fixes and changes across the codebase