VolExp - Volatility Explorer

Volatility Explorer allows user to access Memory Dump & function as Volatility Framework plugin. Program functions like Process Explorer/Hacker but also provides access to Memory Dump or real-time memory via Memtriage. It runs on Windows, Linux & MacOS, using only Windows memory images. It can view Loaded dll's, open handles, network connections, PE properties, and more. It supports viewing files in Memory Dump, extracting files, viewing Windows Objects, MFT, regview, struct analysis, and running Volatility functions