# volatility3

> Memory forensics framework — analyze RAM dumps to find malware, hidden processes, network connections, and injected code

- Run volatility3:

`vol3 -f <memory_dump> windows.info`

- Run volatility3:

`vol3 -f <memory_dump> windows.pslist`

- Run volatility3:

`vol3 -f <memory_dump> windows.pstree`

- Run volatility3:

`vol3 -f <memory_dump> windows.netscan`