Volatility Memory Analysis: Building Linux Kernel Profiles

Volatility 3 does not require profiles! Check it out: https://youtu.be/Uk3DEgY5Ue8 In this video we show how to build a Linux profile for Volatility. Note that even if a profile is generated, plugins may still not be able to parse a memory image correctly. Check the volatility website to see what kernel versions are supported. More information on building a profile can be found here: https://github.com/volatilityfoundation/volatility/wiki/Linux 🚀 Full Digital Forensic Courses → https://learn.dfir.science 010001000100011001010011011000110110100101100101011011100110001101100101 Get more Digital Forensic Science 👍 Subscribe → https://bit.ly/2Ij9Ojc ❤️ YT Member → https://bit.ly/DFIRSciMember ❤️ Patreon → https://www.patreon.com/dfirscience 🕸️ Blog → https://DFIR.Science 🤖 Code → https://github.com/DFIRScience 🐦 Follow → https://www.twitter.com/DFIRScience 📰 DFIR Newsletter → https://bit.ly/DFIRNews 010100110111010101100010011100110110001101110010011010010110001001100101 Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.