> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/memory-forensics.md).

# Memory Forensics

### Exercises

* [Volatility Basics](/cas-cybersecurity/forensic-exercises/memory-forensics/volatility2-basics-linux.md) (Linux dump)
* [Volatility Exercise 1](/cas-cybersecurity/forensic-exercises/memory-forensics/volatility2-exercise-1.md) (Windows dump)
* [Volatility3 Exercise](/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-1.md) 1 (Windows dump)
* [Volatility3 Exercise 2](/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-2.md)
* [Volatility3 Exercise 3](/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-3.md)

### Similar Exercises

* [Memory dump analysis](/cas-cybersecurity/malware-analysis/yara/memory-dump-analysis.md) (YARA)
* [Velociraptor Volatility analysis](/cas-cybersecurity/live-response/windows-response-lab/volatility-analysis.md)