Learning Malware Analysis

3.1.2 Volatility Source Package

Volatility is also distributed as a source package; you can run it on Windows, macOS, or Linux operating systems. Volatility relies on various plugins to perform tasks, and some of these plugins depend on third-party Python packages. To run Volatility, you need to install Python 2.7 Interpreter and its dependencies. The web page: https://github.com/volatilityfoundation/volatility/wiki/Installation#recommended-packages contains a list of the third-party Python packages that are required by some of the Volatility plugins. You can install these dependencies by reading the documentation. Once all the dependencies are installed, download the Volatility source code package, extract it, and run Volatility, as follows: ...