Sign in to track your courses and achievements.
Sign in to Ocsaly →Learn
Achievements
Capture The Flag
Starting with Volatility Plugins
COURSE LESSON
Continue your learning
Sign in to access your enrolled courses, or view the course details before enrolling.
Sign in View courseStorage Media
Understanding Computer Systems (For Forensic Investigators)
DFIR Field Guide & Analysis Process (Practical Crime Scene Workflow)
Evidence Acquisition in Digital Forensics
Memory Analysis with Volatility Framework
Disk and File System Forensics with Autopsy
Get hands-on with basic Volatility plugins that extract valuable information like running processes, active handles, and command history. This is your first step in converting raw memory into readable intelligence.
Key topics:
-
Common plugins:
pslist,pstree,cmdline,svcscan -
Understanding output context
-
Extracting command history and services
-
Filtering for relevant activity
