Hi Jason, I think you sent this only to me by mistake :-) I'm forwarding this to the list so others can respond to you. As for other OS's it there's been some discussion related to this recently on the users list you can check out too: http://lists.volatilityfoundation.org/pipermail/vol-users/2010-January/thre… But yes, you should be able to extend Volatility to include other OS's. All the best, -Jamie ---------- Forwarded message ---------- From: Jason Reynolds <JReynolds(a)pathwayforensics.com> Date: Wed, Jan 6, 2010 at 5:13 PM Subject: RE: [Vol-dev] Re: Vol-dev Digest, Vol 14, Issue 1 To: Jamie Levy <jamie.levy(a)gmail.com> Hi All, A similar question to John's, but also a little different -- Is there a place where the format of ram allocation and DTB's are documented, or is the best documentation simply disassembling the associated operating system? I am curious to know if additional OS's could be easily added to volatility.  If there is sufficient documentation on the OS it should be relatively simple to write a parser. Thanks in advance.