This article remains available in its original form while its screenshots and commands are prepared for the new research layout.
Field note
MemLabs Lab 1: Beginner’s Luck
A memory-forensics walkthrough using Volatility to recover evidence from a Windows memory image.