Other

volatility3

Volatility plugin for extracts configuration data of known malware

MalConfScan

GNU General Public License v3.0

VolUtility

MIT License

orochi

Minor mode for visual feedback on some operations in Emacs. STATUS: *STABLE*

volatile-highlights.el

avml

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

GNU General Public License v2.0

LiME

volatility

Web interface for the Volatility Memory Forensics Framework

evolve

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness. 

TotalRecall

VolDiff: Malware Memory Footprint Analysis based on Volatility