Building on Volatility to Support Mac OS X Memory Forensics
Andreas wrote a blog post describing an open source tool, written by Kyeong-Sik Lee and the Korean Digital Forensic Research Center, to analyze Mac OS X memory samples. The tool is called Volafox and builds on top of the Volatility code base. Hopefully, this will help inspire more work on the area of Mac OS X memory analysis and this support will get fully integrated into Volatility. Anyone up for the challenge?
Shoutz to Andreas and Kyeong-Sik Lee.