# Volatility 3

> Inspect operating-system memory samples to recover processes, modules and other runtime artifacts through forensic plugins.

- Type: Tool
- Targets: Binary
- Category: Debugging and dynamic analysis
- Relationship: Foundation tool
- Sources reviewed: 2026-10-29
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/volatilityfoundation/volatility3>
- Primary source: <https://github.com/volatilityfoundation/volatility3/blob/77ff0b1932d77527f850c8ced01d85805ea7bf97/README.md>
- Catalog page: <https://awesomerea.org/resources/volatility3/>
- Record JSON: <https://awesomerea.org/resources/volatility3/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/volatility3/index.md)

## Requirements & limits

- Requires a supported memory image, appropriate symbol tables and Python; the pinned README specifies Python 3.8+. The default branch is develop, while stable is the release branch.
- Windows symbols may be downloaded and cached automatically; Linux and macOS symbols can need manual generation with matching kernel information. The project uses the custom Volatility Software License.

## Primary sources

1. <https://github.com/volatilityfoundation/volatility3/blob/77ff0b1932d77527f850c8ced01d85805ea7bf97/README.md>

## More in Native binaries

- [Decompile-Bench](https://awesomerea.org/resources/decompile-bench-dataset/index.md) · Project
- [FoxDec](https://awesomerea.org/resources/foxdec/index.md) · Tool
- [Dragodis](https://awesomerea.org/resources/dragodis/index.md) · Tool
- [MBBSDASM](https://awesomerea.org/resources/mbbsdasm/index.md) · Tool
- [blc](https://awesomerea.org/resources/blc/index.md) · Tool
- [IDA BPF Processor](https://awesomerea.org/resources/ida-bpf-processor/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.