Volatility 3

JSON →
library 2.28.0 ·python
verified Jun 7, 2026

Volatility 3 is the next-generation memory forensics framework for analyzing memory dumps (RAM captures). It extracts digital artifacts from volatile memory (RAM) samples on Windows, Linux, and macOS. Current version 2.28.0 (released 2025-05-02) is stable and actively maintained, with about 2-3 releases per year.