Apologies if this has been addressed already but can't find it in the archives. Is volatility able to verify image signatures similar to how process monitor can? Suspect the answer is no as it's not a live system and may not be running under windows. None of the plugins seem to be able to do this from what I can see, just want to check I'm not missing something.