1
00:00:01,270 --> 00:00:08,870
In this lecture, we're going to install the volatility framework volatility framework here.

2
00:00:08,890 --> 00:00:15,510
So now you're going to enter the first Volatility foundation.org website and click on downloads here.

3
00:00:15,520 --> 00:00:21,070
And after clicking downloads, you in this in this course, we're going to use the volatility two,

4
00:00:21,100 --> 00:00:24,550
which is the most stable version of the volatility.

5
00:00:24,550 --> 00:00:28,540
And we're going to click on the Select Your Window operating system.

6
00:00:28,540 --> 00:00:33,730
And in this course I'm going to click on the Linux standalone executable.

7
00:00:33,730 --> 00:00:39,160
And because I use the Linux in this case here.

8
00:00:39,160 --> 00:00:45,400
So but if you are use Windows or menu, so you can you can download both of them because the volatility

9
00:00:45,430 --> 00:00:48,010
framework actually is based on Python here.

10
00:00:48,010 --> 00:00:51,760
So you can run it actually pretty wide variety of.

11
00:00:53,730 --> 00:00:54,180
Here.

12
00:00:54,210 --> 00:00:55,440
Click on this.

13
00:00:55,500 --> 00:00:55,800
Oops.

14
00:00:57,310 --> 00:00:57,910
You know, let's.

15
00:00:57,910 --> 00:01:00,170
Let's actually, uh.

16
00:01:02,290 --> 00:01:04,120
Here open again and.

17
00:01:04,120 --> 00:01:04,540
Yeah.

18
00:01:05,940 --> 00:01:08,410
Why we don't have the downloads here.

19
00:01:09,170 --> 00:01:09,480
Sure.

20
00:01:13,710 --> 00:01:14,970
This is a Windows standalone.

21
00:01:15,120 --> 00:01:16,110
We're going to install the.

22
00:01:17,320 --> 00:01:23,390
We're going to install the Linux standalone here and click on save file.

23
00:01:23,410 --> 00:01:25,780
It's 31MB.

24
00:01:27,190 --> 00:01:28,500
As you can see here.

25
00:01:41,830 --> 00:01:42,490
Here.

26
00:01:42,490 --> 00:01:45,100
Let's open our volatility here.

27
00:01:45,100 --> 00:01:47,500
And as you can see, the file is downloaded.

28
00:01:47,530 --> 00:02:00,400
Open this and extract the let's extract to the desktop here in this here volatility and extract to volatility

29
00:02:00,400 --> 00:02:00,820
folder.

30
00:02:00,820 --> 00:02:02,160
Actually, did we extract?

31
00:02:02,200 --> 00:02:05,740
Yeah, it is the volatility fall in the volatility folder here.

32
00:02:05,740 --> 00:02:13,700
So let's open the terminal and look here, see the desktop here and let me.

33
00:02:13,930 --> 00:02:23,260
Okay, so let's see the desktop here and let's see the volatility, let's see the volatility Linux standalone.

34
00:02:23,260 --> 00:02:26,890
And as you can see, there isn't files here, which is.

35
00:02:27,650 --> 00:02:35,420
So in order to run this full text file, as you can see, this is 64 bit and 32 bit uh, here a lecture.

36
00:02:35,420 --> 00:02:44,780
So if you Linux is 64 bit, which probably your Linux is 64 bit in most Linux in this uh, 2023 is actually

37
00:02:45,120 --> 00:02:46,550
uh, 64 bit.

38
00:02:46,550 --> 00:02:51,440
So that's why we're going to use a 64 bit version, uh, Python.

39
00:02:51,530 --> 00:03:03,470
Uh, no, actually we can use just the volatility volatility 2.5 Linux and 60 x.

40
00:03:05,850 --> 00:03:06,360
Here.

41
00:03:06,960 --> 00:03:09,390
And as you can see, the is round.

42
00:03:09,390 --> 00:03:14,160
So you in this case we can also run it with sudo here.

43
00:03:14,160 --> 00:03:20,700
As you can see here, it's the with this way we're going to get more privileges to do system to do analysis

44
00:03:20,700 --> 00:03:22,140
on system files also.

45
00:03:22,140 --> 00:03:25,320
And yeah this is just as simple as that.

46
00:03:25,320 --> 00:03:30,990
You can install and download volatility with just these 2 or 3 minutes.

47
00:03:30,990 --> 00:03:32,460
So it's not a big file.

48
00:03:32,460 --> 00:03:38,700
And the next lectures we're going to download the sample images to analyze with use using the volatility

49
00:03:38,730 --> 00:03:39,600
framework.
