Setup Custom Volatility Profile on Kali

setup_volatility.sh

# Set layout PT
setxkbmap pt

# Setup working directory
mkdir -p /volumes/storage1
mount /dev/sda1 -t ext4 /volumes/storage1
cd /volumes/storage1

# Download volatility repo
git clone https://github.com/volatilityfoundation/volatility

# Setup Volatility custom profile
cd volatility/
wget http://turbina.gsd.inesc-id.pt/csf1819/Ubuntu160405.zip
mv Ubuntu160405.zip volatility/plugins/overlays/linux/

# Get profile name
python vol.py --info | grep Ubuntu

# List available commands
python vol.py --profile=LinuxUbuntu160405x64 -f ../sally_mem -h

# List processes
python vol.py --profile=LinuxUbuntu160405x64 -f ../sally_mem linux_pslist