In 2007, the first version of The Volatility Framework was released publicly at Black Hat DC. The software was based on years of published academic research into advanced memory analysis and forensics. Until that point, digital investigations had focused on finding contraband within hard drive images. Volatility introduced people to the power of analyzing the runtime state of a system using data found in volatile storage (RAM). It provided a cross-platform, modular, extensible platform to encourage further work into this exciting area of research. A major goal of the project was to encourage collaboration, innovation, and accessibility to knowledge that had been common within offensive software communities.

Since then, memory analysis has become a critical topic to the future of digital investigations. The project is supported by one of the largest and most active communities in the forensics industry. Volatility provides a unique platform that enables cutting-edge research to be immediately transitioned into the hands of digital investigators. As a result, research built on top of Volatility has appeared at top academic conferences, and Volatility has been used on some of the most critical investigations of the past decade. It is an indispensable digital investigation tool relied upon by law enforcement, military, academia, and commercial investigators around the world.

Volatility development is supported by The Volatility Foundation, an independent 501(c)(3) non-profit organization. The Foundation was established to promote the use of Volatility and memory analysis within the forensics community; defend the project's intellectual property (trademarks, licenses, etc.) and longevity; and help advance innovative memory analysis research. The Foundation was formed to help protect the rights of developers who sacrifice their time and resources to make the world’s most advanced memory forensics platform free and open source.

The Volatility Foundation

Org chart

Teams

Offices