Volatility 2.1 Released! (Official x64 Support) - Vol-users

6 Aug 2012

https://code.google.com/p/volatility/

We are very excited to announce the official release of Volatility 2.1! 
While the main goal of this release was to get x64 support into an 
official release, we also sneaked in a number of interesting new 
capabilities! Highlights of this release include:

     New Address Spaces (AMD64PagedMemory, WindowsCrashDumpSpace64)
     Majority of Existing Plugins Updated with x64 Support
     Merged Malware Plugins into Volatility Core with Preliminary x64 Support (see
FeaturesByPlugin21)
     WindowsHiberFileSpace32 Overhaul (also includes x64 Support)
     Expanded Operating System Profiles:
         Windows XP SP1, SP2 and SP3 x86
         Windows XP SP1 and SP2 x64 (there is no SP3 x64)
         Windows Server 2003 SP0, SP1, and SP2 x86
         Windows Server 2003 SP1 and SP2 x64 (there is no SP0 x64)
         Windows Vista SP0, SP1, and SP2 x86
         Windows Vista SP0, SP1, and SP2 x64
         Windows Server 2008 SP1 and SP2 x86 (there is no SP0)
         Windows Server 2008 SP1 and SP2 x64 (there is no SP0)
         Windows Server 2008 R2 SP0 and SP1 x64
         Windows 7 SP0 and SP1 x86
         Windows 7 SP0 and SP1 x64
     Plugin Additions (Now Over 70+ Analysis Plugins!):
         Printing Process Environment Variables (envvars)
         Inspecting the Shim Cache (shimcache)
         Profiling Command History and Console Usage (cmdscan, consoles)
         Converting x86 and x64 Raw Dumps to MS CrashDump (raw2dmp)
     Plugin Enhancements:
         Verbose details for kdbgscan and kpcrscan
         idt/gdt/timers plugins cycle automatically for each CPU
         apihooks detects LSP/winsock procedure tables
         New Output Formatting Support (Table Rendering)
     New Mechanism for Profile Modifications
     New Registry API Support
     New Volshell Commands
     Updated Documentation and Command Reference

In particular, I also wanted to take this opportunity to recognize those 
on the development team who helped push to make this release possible: 
Mike Auty, Andrew Case, Michael Cohen, Michael Hale Ligh, and Jamie Levy. 
These are the people who make a number of sacrifices in their own personal 
lives to continue to bring you the most advanced memory forensics 
framework in the world! If you appreciate the hard work they put into 
Volatility, I encourage you to Support Open Source Forensics Developers 
(SOSFD). Finally, shoutz to the Volatility Community for their continued 
support and feedback!

As an added bonus, we will also be releasing Volatility 2.2 at the Open 
Memory Forensics Workshop 2012 on October 2.  This will be your only 
opportunity to learn about all the new features in 2.1 and 2.2 from the 
actual Volatility development team. Please register early. Seats are 
filling up fast!

The Volatility Project