This tool takes memory image file and exports as csv input and automatically runs cross-file triage analysis to surface suspicious indicators across all major memory artifacts. It replaces the manual, plugin-by-plugin workflow with a single interactive dashboard.

Highly useful Volatility-Malfind output parser for detecting Code/Process Injection patterns

A write-up about the CyberDefenders Lab BlackEnergy

Parallel Volatility 3 pipeline for large-scale ransomware memory forensics, extracting artifacts and correlating malfind, psscan, filescan, and netscan IOCs.