Volatility: The volatile memory forensic extraction framework

Outside of security stuff, over the years I've found this really handy for troubleshooting as well. Being able to extract detailed process info, screenshots, and a bunch of other things from a memory dump have allowed me to get a better idea of what a user was doing when a Windows BSOD occurred.

It builds more a nice picture of what was going on when paired with the users description. Or sometimes, depending on the user, you just don't have anything else to go on besides "it crashed".

Whashodi?

It’s a fantastic project, but what’s the benefit of posting this here, today?

There’s no context other than the link to the GitHub project. And it’s not like this is remotely new…?