volatilityfoundation/volatility3 v2.11.0

Volatility 3 2.11.0

on GitHub

New Plugins:

• linux.boottime
• linux.ebpf
• linux.hidden_modules
• linux.kthreads
• linux.pagecache
• linux.pidhashtable
• linux.ptrace
• windows.amcache
• windows.cmdscan
• windows.consoles
• windows.debugregisters
• windows.orphan_kernel_threads
• windows.pe_symbols
• windows.scheduled_tasks
• windows.unhoooked_system_calls

Improvements to:

• Output formatting and filtering in the CLI
• Additional architecture data files for vmscan

Note: Python 3.8 is now the minimum supported version of python