Volatility3安装

Volatility3安装

工具地址：https://github.com/volatilityfoundation/volatility3

安装

git clone https://github.com/volatilityfoundation/volatility3.git
python3 vol.py -h

系统缺少pycrypto,distorm这两个辅助包而无法加载相应插件

安装python辅助包

pycrypto：

https://pypi.org/project/pycrypto/#files

distorm：

https://pypi.org/project/distorm3/#files

分别进入pycrypto/distorm解压文件路径执行命令：Python setup.py install

yara
https://pypi.org/project/yara-python/

pefile
https://pypi.org/project/pefile/

参考文章：https://www.qter.org/portal.php?mod=view&aid=13437