Volatility Framework Pricing 2026

Network Analysis

Identifies active network connections, listening ports, and associated processes.

Process Analysis

Extracts information about running processes, including process lists, parent-child relationships, and open handles.

Malware Detection

Includes plugins to detect common malware techniques like injected code, hidden processes, and rootkit components.

Registry Analysis

Parses registry hives from memory to uncover system configurations, user activity, and malware persistence mechanisms.

File System Analysis

Recovers information about open files, recently accessed files, and potential data exfiltration.

Plugin Extensibility

Supports a wide range of plugins for specialized analysis and custom artifact extraction.

Credential Extraction

Extracts cached credentials, password hashes, and other sensitive information from memory.

Kernel Module Analysis

Lists loaded kernel modules and drivers, helping to detect rootkits or suspicious kernel-level activity.