volatilityfoundation

Optional exact-parity acceleration for pool-header scanning and registry-hive walking (measured 26x / 2,607x) — collaboration offer Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

volatilityfoundation/volatility3#2040 · 1 comment · Opened Sep 20, 2026

`to_list` silently ends a linked-list walk on one unreadable node, dropping the remaining list members from plugin output with no signal Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

volatilityfoundation/volatility3#2039 · Opened Sep 18, 2026

Missing _ETHREAD kernel symbol for Windows Server 2016 14393 memory image Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

volatilityfoundation/volatility3#2036 · 3 comments · Opened Sep 16, 2026

Volatility 3 fails to create translation layer and symbol table for Windows memory image Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

volatilityfoundation/volatility3#2021 · 1 comment · Opened Sep 3, 2026

[Feature Request] Add MCP (Model Context Protocol) Server for AI Agent Integration Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

volatilityfoundation/volatility3#2004 · Opened Jul 8, 2026

[Feature Request] MCP Server Integration for AI-Assisted Memory Forensics Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

volatilityfoundation/volatility3#2002 · Opened Jul 8, 2026

My memory dump parses successfully with version 2.27.0, but not with version 2.28.0 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

volatilityfoundation/volatility3#1985 · 9 comments · Opened May 21, 2026

Unable to validate the plugin requirements: ['plugins.Info.kernel.layer_name', 'plugins.Info.kernel.symbol_table_name'] Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

volatilityfoundation/volatility3#1978 · 2 comments · Opened Apr 30, 2026

linux.pagecache.RecoverFs consuming massive memory until reaped Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

volatilityfoundation/volatility3#1975 · 1 comment · Opened Apr 28, 2026

iptables-legacy / iptables-nft plugin Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

volatilityfoundation/volatility3#1973 · 4 comments · Opened Apr 12, 2026

Unable to scan or run modules on windows 11 memory dump image Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

volatilityfoundation/volatility3#1970 · 23 comments · Opened Apr 6, 2026

Volatility3 unable to load Ubuntu 5.0.0-27-generic symbols – PsList fails due to missing banner symbols Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

volatilityfoundation/volatility3#1952 · 2 comments · Opened Mar 6, 2026

PsXview in Vol3 not showing a hidden process Open

volatilityfoundation/volatility3#1947 · 19 comments · 1 reaction · 2 assignees · Opened Feb 26, 2026

Windows Modules Not Returning Results Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

volatilityfoundation/volatility3#1944 · 20 comments · Opened Feb 24, 2026

Linux: `system_table_name1!page` is missing the `.index` attribute Open

volatilityfoundation/volatility3#1943 · 8 comments · 1 assignee · Opened Feb 23, 2026

Add Intel 5-level paging support Open

stale

Difficulty 4/5 3-5 days Newbie friendliness 58/100

volatilityfoundation/volatility3#1938 · 1 comment · 2 reactions · Opened Feb 9, 2026

Linux plugins (pslist, sockstat) fail on Ubuntu 24.04 (Kernel 6.8) due to missing symbols (assoc_array_ptr, etc) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

volatilityfoundation/volatility3#1934 · 4 comments · Opened Jan 28, 2026

`direct_system_calls.py: _is_valid_syscall()` reports wrong assembly block Open

stale

Difficulty 3/5 1-2 days Newbie friendliness 48/100

volatilityfoundation/volatility3#1930 · 1 comment · Opened Jan 10, 2026

Unable to validate the plugin requirements: ['plugins.Info.kernel.layer_name', 'plugins.Info.kernel.symbol_table_name'] Open

stale

Difficulty 4/5 3-5 days Newbie friendliness 32/100

volatilityfoundation/volatility3#1925 · 2 comments · Opened Dec 25, 2025

Windows.truecrypt.Passphrase plugin failed Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

volatilityfoundation/volatility3#1922 · 6 comments · Opened Dec 10, 2025

Windows 11 Open

stale

Difficulty 4/5 3-5 days Newbie friendliness 30/100

volatilityfoundation/volatility3#1872 · 4 comments · 1 reaction · Opened Sep 4, 2025

Unsatisfied requirement plugins.PsList.kernel: Linux kernel Open

volatilityfoundation/volatility3#1862 · 5 comments · 1 reaction · 1 assignee · Opened Jun 30, 2025

Can you please specify for each Symbol table pack the exact list of targeted operating systems ? Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

volatilityfoundation/volatility3#1809 · 8 comments · Opened May 15, 2025

Windows modules needs to enforce page aligned base or 0 base Open

next-release

volatilityfoundation/volatility3#1633 · 3 comments · 1 assignee · Opened Feb 24, 2025

Feature Request: Support Live Shimcache Data Extraction via Winpmem Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

volatilityfoundation/volatility3#1605 · 1 comment · Opened Feb 5, 2025

Kallsyms does a lot of stuff manually that should use the framework Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

volatilityfoundation/volatility3#1602 · 4 comments · Opened Feb 2, 2025

How to use Volatility3 as a Library? Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

volatilityfoundation/volatility3#1404 · 1 comment · Opened Dec 15, 2024

Improve automagic classes selection Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

volatilityfoundation/volatility3#1333 · 5 comments · Opened Nov 6, 2024

Question - Does Volatility Support DumpIt compressed zdmp? Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

volatilityfoundation/volatility3#1325 · 9 comments · Opened Oct 29, 2024

Cache Update Issues Open

volatilityfoundation/volatility3#1255 · 6 comments · 1 assignee · Opened Sep 9, 2024

Potential support of minidump formats from processes? Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

volatilityfoundation/volatility3#1102 · 8 comments · Opened Feb 14, 2024

Yarascan process_yara_options method needs updating to ensure requirements and processing options remain in sync Open

stale

Difficulty 4/5 3-5 days Newbie friendliness 45/100

volatilityfoundation/volatility3#1056 · 11 comments · Opened Dec 6, 2023

dump ecfs dump file format from ram with volatility Open

enhancement low-priority

Difficulty 5/5 Over a week Newbie friendliness 25/100

volatilityfoundation/volatility3#906 · 3 comments · Opened Feb 2, 2023

Issue with windows.strings plugin Open

volatilityfoundation/volatility3#876 · 44 comments · 1 assignee · Opened Dec 6, 2022

Write a cross platform plugin ? Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

volatilityfoundation/volatility3#868 · 3 comments · Opened Nov 17, 2022

Can volatility use swap file when a page fault occurs? Open

question

Difficulty 5/5 Over a week Newbie friendliness 35/100

volatilityfoundation/volatility3#820 · 2 comments · Opened Aug 25, 2022

What steps would be needed to add a new OS to Volatility? Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

volatilityfoundation/volatility3#765 · 6 comments · Opened Jun 11, 2022

RISC-V support Open

enhancement file-format/layers

Difficulty 5/5 Over a week Newbie friendliness 25/100

volatilityfoundation/volatility3#763 · 1 comment · Opened Jun 9, 2022

Missing plugin impscan Open

plugin-request

Difficulty 4/5 3-5 days Newbie friendliness 25/100

volatilityfoundation/volatility3#748 · 7 comments · Opened May 28, 2022

Missing notepad and clipboard plugins from volatility 2 Open

low-priority plugin-request

Difficulty 5/5 Over a week Newbie friendliness 25/100

volatilityfoundation/volatility3#710 · 4 comments · 1 reaction · Opened Apr 24, 2022

Apihooks Open

enhancement plugin-request

volatilityfoundation/volatility3#686 · 8 comments · 1 assignee · Opened Mar 24, 2022

windows.psscan: Error only when using --physical Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

volatilityfoundation/volatility3#591 · 24 comments · Opened Nov 19, 2021

Does Volatility support the Encase EX file format? Open

enhancement question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

volatilityfoundation/volatility3#560 · 3 comments · Opened Sep 3, 2021

Can I provide a plugin with requirements without running automagic? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

volatilityfoundation/volatility3#558 · 4 comments · Opened Sep 3, 2021

Support to run against multiple memory images Open

enhancement

volatilityfoundation/volatility3#433 · 1 assignee · Opened Jan 25, 2021

netstat: better handling of TCP Endpoint parsing Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

volatilityfoundation/volatility3#420 · Opened Jan 12, 2021

Support for process explorer/procdump dmp files Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

volatilityfoundation/volatility3#341 · 4 comments · Opened Sep 20, 2020

Ability to change how byte results are displayed Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

volatilityfoundation/volatility3#317 · 4 comments · Opened Aug 27, 2020

Add label for source (machine name) in timeliner output Open

enhancement

volatilityfoundation/volatility3#94 · 1 assignee · Opened Oct 18, 2019

Get new issues in your inbox