Volatility is a command line memory analysis and forensics tool for extracting
artifacts from memory dumps. Volatility Workbench is free, open source and runs
in Windows. It provides a number of advantages over the command line version
including,
- No need to install Python script interpreter.
- No need of remembering command line parameters.
- Storage of the platform and process list with the memory dump, in a .CFG file.
When a memory image is re-loaded, this saves a lot of time and eliminates the
need to get process list each time.
- Automatic platform detection with .CFG files
- Simpler copy & paste.
- Simpler printing of paper copies (via right click).
- Simpler saving of the dumped information to a file on disk.
- A drop down list of available commands and a short description of what the
command does.
- Time stamping of the commands executed.
- Auto-loading the first dump file found in the current folder.
- Support for analysing Mac and Linux memory dumps.
- Up to 20% increase in speed compared to interpreted version.
Maelezo ya mchapishaji (Kiingereza)
Volatility Workbench ni nini?
Programu Volatility Workbench inachapishwa na PassMark Software. Ni programu ya umiliki ya Windows iliyo katika kundi la “Lugha na SDK”. Imeandikwa kwa Python.
Usakinishaji na mahitaji
Mchapishaji hutoa visakinishi vya Portable kwa Windows ya CPU yoyote. Kisakinishi kikuu kina ukubwa wa 22.4 MB. Inafanya kazi bila kusakinishwa (portable).
Umaarufu na aina za faili
Kifurushi chake cha Chocolatey kimepakuliwa mara 3,230. Msimbo chanzo kwenye GitHub (volatilityfoundation/volatility3) una nyota 4,521. Programu zinazofanana ni pamoja na Go Programming Language, LLVM na Deno.
Maelezo ya mradi kwenye GitHub: “Volatility 3.0 development”
Faida / Hasara
Faida
- Portable: inafanya kazi bila kusakinishwa
Hasara
- Leseni ya umiliki: kagua masharti na bei
- Hakuna sasisho kwa zaidi ya mwaka mmoja
Kwa ufupi: Volatility Workbench ni zana ya kundi la “Lugha na SDK” kwa kompyuta za CPU yoyote. Masasisho yamepungua.
Je, ni salama kupakua Volatility Workbench?
- Faili inatolewa na osforensics.com, kikoa cha mchapishaji mwenyewe
- Kiungo cha kupakua kinatumia HTTPS
- Hashi ya SHA256 imechapishwa, hivyo unaweza kuthibitisha faili:
A9D9B6944B77A9D9A14180D5F173767E756C27A29CB810EBB27E285C39C1DCF9· Fungua ripoti ya VirusTotal ya hashi hii - Kiungo kilijibu tulipokikagua mara ya mwisho (22 Oktoba 2026)
- ExeAtlas haihifadhi, haifungi wala haibadilishi visakinishi
Mwongozo unaohusiana: Jinsi ya kukagua hashi ya SHA256 ya faili kwenye Windows
Mbinu za usalama (OpenSSF Scorecard)
Ukaguzi wa kiotomatiki wa hazina ya volatilityfoundation/volatility3 kwenye GitHub uliofanywa na Open Source Security Foundation, mara ya mwisho tarehe 19 Oktoba 2026.
- Unadumishwa kikamilifu10
- Hakuna workflow hatari10
- Hakuna faili za binary kwenye hazina10
- Leseni imetajwa9
- Uchambuzi tuli wa msimbo9
- Ukaguzi wa msimbo8
- Ruhusa za tokeni zilizobanwa0
- Vitegemezi vilivyobanwa toleo0
- Beji ya OpenSSF Best Practices0
- Sera ya usalama0
- Fuzzing0
- Matoleo yaliyotiwa sahihi0
- Ulinzi wa matawi0
Alama hii inapima jinsi mradi unavyoendelezwa na kutolewa, si kama programu ni salama kusakinisha. scorecard.dev
Matoleo ya karibuni
Toleo 1 ›| Toleo | Tarehe | Ukubwa | Faili |
|---|---|---|---|
| 3.0.1014Jipya zaidi | 8 Oktoba 2025 | 22.4 MB | CPU yoyote ZIP |
Kusakinisha kwa mstari wa amri
Usakinishaji kimya ›winget install --id PassMark.VolatilityWorkbench -echoco install volatility3 -yMwongozo unaohusiana: Jinsi ya kutumia winget: sakinisha na sasisha programu
Taarifa
- Mchapishaji
- PassMark Software
- Kategoria
- Lugha na SDK
- Leseni
- Proprietary
- Bei
- Angalia tovuti ya mchapishaji
- Msimbo chanzo
- github.com/volatilityfoundation/volatility3
- Imeandikwa kwa
- Python
- Inahitaji
- Windows 11 / 10
- Usanifu
- CPU yoyote
- Kisakinishi
- Portable
- Toleo
- 3.0.1014
- Ilitolewa
- 8 Oktoba 2025
- Iliongezwa kwenye orodha
- 18 Desemba 2025
- Matoleo yaliyoorodheshwa
- 1
- Vipakuliwa vya Chocolatey
- 3,230
- Nyota za GitHub
- 4,521
- Forks za GitHub
- 726
- Tovuti
- osforensics.com
- Kitambulisho cha winget
- PassMark.VolatilityWorkbench
- Kifurushi cha Chocolatey
- volatility3
Ukadiriaji na maoni
Bado hakuna maoni. Kuwa wa kwanza kuikadiria.
Mbadala wa Volatility Workbench
Ona zote ›-
Chanzo huriaM2.1 ↓ -
Chanzo huriaM2.8 ↓ -
Chanzo huriaelfu 249.7 ↓ -
Chanzo huriaM3.7 ↓ -
Chanzo huriaM1.9 ↓ -
Chanzo huriaM2.2 ↓ -
Chanzo huriaelfu 263.6 ↓ -
Chanzo huriaelfu 12.5 ↓
Maswali yanayoulizwa mara kwa mara
Je, Volatility Workbench ni bure?
Volatility Workbench ni programu ya umiliki (msimbo wake haujawekwa wazi) (leseni: Proprietary). Kama inalipiwa au la hutegemea toleo lake: angalia tovuti ya mchapishaji kwa bei na matoleo ya bure.
Je, ni salama kupakua Volatility Workbench?
Faili inapakuliwa kutoka osforensics.com, ambayo ni ya mchapishaji mwenyewe; ExeAtlas haihifadhi wala haibadilishi faili. Linganisha hashi yake ya SHA256 na ile iliyoonyeshwa hapa, au fungua ripoti ya VirusTotal ya hashi hiyo.
Jinsi ya kusakinisha Volatility Workbench kwa winget?
Fungua PowerShell au Windows Terminal na uendeshe amri ya winget iliyoonyeshwa kwenye ukurasa huu. winget hupakua kisakinishi rasmi na kukagua hashi yake ya SHA256 kabla ya kukiendesha.
Je, Volatility Workbench inafanya kazi kwenye ARM (Windows on Arm)?
Kisakinishi hakitegemei usanifu wa kichakataji.
Je, Volatility Workbench inaweza kutumika bila haki za msimamizi?
Ndiyo, ni portable: fungua kumbukumbu (archive) na uiendeshe.
Ni programu gani mbadala wa Volatility Workbench?
Go Programming Language, LLVM, Deno, CMake na Yarn. Ukurasa wa mbadala unazilinganisha.
