docker pull cincan/volatility docker run --rm -it cincan/volatility --info docker run --rm -v /samples:/samples -it cincan/volatility imageinfo -f /samples/vol.vmem
[取证] Volatility
原文：https://www.cnblogs.com/yzpopulation/p/14026332.html
