- Community plugins
- Plugin development tutorial
- Prefetch
- AnyDesk
- KeePass
- USBSTOR
- LastPass
- CobaltStrike
- Uninstallinfo
- Prefetch
- idxparser
- Firefox History
- Chrome History
- sqlite
- Trustrecords
- ssdeepscan
- malfinddeep
- apihooksdeep
- RAMSCAN
- CMDCHECK
- Fast VAD Scan
- Path Check
- Triagecheck
- AutoRuns
- Bitlocker
- Linux - Inodes
- VolWeb - Volatility 3 frontend
- Orochi - The Volatility Collaborative GUI
- Volatility Workbench
- memOptix - Jupyter notebook
- Auto_vol - Automated basics volatility tasks - Extracts bitlocker/luks keys and mounts disk image
- AutoVolatility
- VolatilityBot
- Calamity
- memtriage
- AutoTimeliner
- Power Up Memory Forensics with Memory Baseliner
- Automating Memory Analysis with AChoirX, Volatility, and LOKI
- VMware Memory Analysis with MemProcFS
- Comae Memory and Network Analysis: Beginning an Incident Investigation
- 2019 - Characteristics and detectability of Windows auto-start extensibility points in memory forensics
- 2018 - Deepmem: Learning graph neural network models for fast and robust memory forensic analysis
- 2018 - Experimental analysis of web browser sessions using live forensics method
- 2017 - Web browser forensics: google chrome
- 2017 - Scanning memory with Yara