mario.haustein@hrz.tu-chemnitz.de Mario Haustein sam@gentoo.org Sam James Volatility is the world's most widely used framework for extracting digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer visibility into the runtime state of the system. support plugins that decrypt passwords, password hashes, etc. support plugins that perform malware analysis and disassemble code improve error messages regarding improperly configured ISF files support memory acquisition via leechcore support AVMLs native compression format support YARA pattern matching engine volatilityfoundation/volatility3 volatility3