Volatility 3

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Volatility 3 is ranked #8 of 29 in digital forensics software on Inferse. It runs on Linux, macOS, Self-hosted, Windows. There is a free plan.

Compared on digital forensics software

Free plan: Yesvolatilityfoundation.org
Evidence sources: volatile memory (RAM) samples and memory images from Windows, Linux, and macOSvolatilityfoundation.org
Mobile forensics: Novolatilityfoundation.org
Disk imaging: Novolatilityfoundation.org
Memory forensics: Yesvolatilityfoundation.org
Supported platforms: Windows, macOS, Linuxvolatilityfoundation.org
Export formats: CSV, JSON, JSONL, pretty, quickvolatilityfoundation.org

Facts

Purpose: Volatility 3 extracts digital artifacts from volatile memory (RAM) samples to provide visibility into a system’s runtime state.github.com · 30 Sept 2026
Open source: The Volatility Foundation describes the framework as free and open source, available for download on GitHub.volatilityfoundation.org · 30 Sept 2026
Python requirement: Volatility 3 requires Python 3.8.0 or later and is published on PyPI.github.com · 30 Sept 2026
Supported systems: The project provides symbol table packs for Windows, macOS, and Linux; Windows symbols can be queried, downloaded, generated, and cached when missing, while Mac and Linux symbol tables must be produced manually.github.com · 30 Sept 2026
Cloud storage: The Foundation says a 2024 release added support for Amazon S3 and Google Cloud Storage.volatilityfoundation.org · 30 Sept 2026
Documentation: The framework is documented through doc strings, can be built with Sphinx, and has generated documentation online.github.com · 30 Sept 2026
Support: The project directs bug reports to GitHub Issues and community support questions to its Slack.github.com · 30 Sept 2026
License conditions: The Volatility Software License allows free use, sharing, and building, and requires publicly sharing source code for additions made available to others.volatilityfoundation.org · 30 Sept 2026
License warranty: The license says the software is provided as is without warranty or condition, to the extent allowed by law.volatilityfoundation.org · 30 Sept 2026
Intended users: The Foundation says Volatility is used by law enforcement, military, academia, and commercial investigators.volatilityfoundation.org · 30 Sept 2026
Training: The Foundation offers an endorsed malware and memory forensics training course designed and taught by the framework’s creators.volatilityfoundation.org · 30 Sept 2026
Release status: The Foundation’s history page lists Volatility 3 version 2.28.2 as released in September 2026.volatilityfoundation.org · 30 Sept 2026