Exception raised for Volatility-related errors.

Wrapper around Volatility3 CLI for memory analysis. This class provides a high-level interface to Volatility3 for memory dump analysis. C

Configuration for Volatility execution.

Network connection scanner. Detects: - Connections to malicious IP addresses - Unusual port usage - Suspicious outbound connectio

Model for a suspicious process found during scanning. Attributes: rule: Name of the detection rule that triggered process: Pr

YARA-based malware scanner.

Main malhunt orchestrator for malware hunting in memory dumps. Coordinates the analysis pipeline: 1. Environment setup and validation

Malfind-based injected code scanner. Detects: - Injected code in process memory - Suspicious memory allocations - Allocated but n

Collect and manage process artifacts.

Antivirus scanning using ClamAV. Integrates with ClamAV for scanning dumped process artifacts. Provides detection results and malware ide

Test banner logo generation.

Test exclusion filtering.

Test duplicate rule removal.

Ensure memory profile detection uses multiple heuristics.

Test Malfind scanner.

Test Network scanner.

Ensure prepare_rules downloads and unpacks YARA rules.

Test filtering incompatible rule imports.

Test scanner error handling.

Test SuspiciousProcess model.

Test caching functionality.

Test Volatility command execution.

Test VolatilityConfig settings.

Test finding Volatility binary.

Test imageinfo parsing.

Test symbol diagnostics extraction helpers.

Test VolatilityWrapper initialization.

Test missing YARA backend handling.

Test YARA-specific timeout behavior.

Test helpers used for syntax-error recovery in YARA scans.

Test YARA scanner.