Volatility | Cortex XSOAR

Details
Content
Dependencies
Version History
Download With Dependencies

Volatility pack.

PUBLISHER

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex XSOAR
Created	November 9, 2020
Last Release	February 14, 2022

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Automations

Name	Description
VolNetworkConnections	Volatility script for finding all the network connections. This script runs through different commands based on the profile provided.
AnalyzeMemImage	Use Volatility to run common memory image analysis commands
VolConnscan	Volatility script for command connscan
VolGetProcWithMalNetConn	Volatility script for getting the list of processes that have connections to ip address with bad reputation.
VolJson	Execute volatility with command and file as parameters and return output as json.
VolLDRModules	Volatility script for command ldrmodules
VolPSList	Volatility script for command pslist
VolMalfindDumpAgent	Volatility script for command ldrmodules
VolApihooks	Volatility script for command apihooks
VolRaw	Execute volatility with command and file as parameters and returns raw output from stdout.
VolMalfind	Volatility script for command ldrmodules
VolRunCmds	Execute volatility with command and return tabular output. Incase where proper json output is not supported, scripts returns error. User should use raw command.
Volatility	Execute volatility with command and return tabular output. Incase where proper json output is not supported, scripts returns error. User should use raw command.
VolDlllist	Volatility script for command ldrmodules
VolImageinfo	Volatility script for command imageinfo

Pack Name	Pack By
Base	By: Cortex XSOAR
CommonScripts	By: Cortex XSOAR
DemistoRESTAPI	By: Cortex XSOAR