How do you work on memory analysis nowadays? Discussion about the Volatility status.

Hello,

How do you work on memory analysis nowadays?
Let me explain...

I used to work with Volatility (version 2) a few years ago, and it was great.

However, Volatility2 is not maintained anymore, to the benefit of its successor, Volatility3.

Unfortunately, unless I am missing something, Volatility3, despite several years of development, looks quite incomplete and far from feature parity compared to its predecessor. It rather offer the bare minimum, but does not have much interest for DFIR in …

analysis computerforensics memory memory analysis volatility work