After several months I have the alpha version of my plugin.

Actaeon is a tool to perform memory forensics of virtualization environments. 

Starting from a physical memory dump, Actaeon can achieve three important goals: 1) locate any Hypervisor (virtual machine monitor) that uses the Intel VT-x technology, 2) detect and analyze nested virtualization and show the relationships among different hypervisors running on the same machine, and 3) provide a transparent mechanism to recognize and support the address space of the virtual machines.

You can have more information by visiting the following site:

I would like to have feedback (positive or negative) and ideas from you.

Let's improve Actaeon and Volatility :)

--

/mariano