AAron Walters, Nick Petroni, Timothy Fraser, and William Arbaugh publish FATKit: A framework for the extraction and analysis of digital forensic data from volatile system memory. This paper introduces the modular, extensible Forensic Analysis ToolKit (FATKit) framework that increases the practical applicability of volatile memory forensic analysis by freeing human analysts from the prohibitively-tedious aspects of low-level data extraction.
