Is Volatility able ...
 
Notifications
Clear all

Is Volatility able to parse SCADA or PLC memory dumps?

1 Posts
1 Users
0 Reactions
63 Views
(@garr3ttmj)
Posts: 1
New Member
Topic starter
 

I was looking into this DFIR challenge scenario, The Troubled Elevator by DFRWS https://github.com/dfrws/dfrws2023-challenge, and some of the artifacts they provide are the PLC memory dumps for the elevator. Looking at the Volatility documentation and Google didn’t produce any results on tools that are able to read PLC memory.

Is it possible for Volatility or are there any others free tools that can do this?

 
Posted : 30/06/2024 11:07 pm
Share: