During the course of a day, I typically come across a number of useful "things" related to volatile memory analysis. Often, I don't have the time to post a complete blog entry so I've decided to start a tumblelog: http://volatility.tumblr.com/ In particular, you may want to check out the hypothetical dialog between a defense attorney and a forensic examiner about volatile memory. http://volatility.tumblr.com/post/15164622 By the way, if any of you are interested in what is happening with Volatility development. We are getting ready to release Volatility 1.2. We mentioned it on the vol-dev list a couple of weeks ago: http://www.volatilityfoundation.org/pipermail/vol-dev/2007-September/000001… I would especially like to thank both Brendan Dolan-Gavitt and Andreas Schuster for all their help and contributions. I would also like to thank those who have provided feedback and bug reports. thanks, AW