We are excited to announce that Volatility 2.5 and the results of the
2015 Volatility Plugin Contest are both now available.
Volatility 2.5 includes many new features including support for Windows
10, Mac OS X El Capitan, and Linux 4.2.3. There are also a number of new
plugins, features, and bug fixes.
On the contest side, we received some very strong submissions this year.
These included recovery of the fully update-to-date shim cache from
memory (no need to wait on a reboot), the Evole GUI, memory analysis of
VMotion VM transfers, and more.
Full information on the release and contest can be found at these links:
http://volatility-labs.blogspot.com/2015/11/plugx-memory-forensics-lifecycl…http://volatility-labs.blogspot.com/2015/10/results-from-2015-volatility-pl…http://www.volatilityfoundation.org/#!25/c1f29
Please let us know if you have any issues or questions and enjoy the new
memory forensics capabilities!
--
Thanks,
Andrew (@attrc)