volatility icon indicating copy to clipboard operation
volatility copied to clipboard
verified publisher icon volatilityfoundation

What is maximum size of memory volatility can analyze ?

Open Rootlente opened this issue 4 years ago • 1 comments

I have had a digital forensics case when volatility can't analyze a ram image, it was 64 GB.

Rootlente avatar Feb 17 '21 08:02 Rootlente

Volatility is routinely used to analyze samples of 64GB, 128GB, and beyond.

If you can give some more specifics, such as:

  • Version of Volatility used
  • Acquistion method used
  • Operating system acquired from
  • Full input/output of Volatility against the sample

Then we can help you narrow down the problem

atcuno avatar Feb 26 '21 15:02 atcuno