Memory Forensics Volatility skill: what it does and how to install it

What it does. Provides a step-by-step playbook for examining Windows and Linux memory dumps with Volatility 2 and 3. It covers OS identification, process and network analysis, code injection, credential and file extraction, registry artefacts, command history and timeline generation, with commands and malware indicators.

When to use it. For malware investigations, incident response, credential recovery or memory-based evidence gathering. Includes Linux-specific analysis and memory acquisition guidance.