Volatlity extracts digital artifacts from volatile memory (RAM) samples. memory capture file is like .bin, .mem, .raw, .sav, .vmem.
Currently on a M1 Mac, had a few issues installing Volatility 2 on a fresh VM via Parallels/VMFusion. I had to look for workarounds before finally getting it to work.
Created a script that installs all the required dependencies needed for Volatility 2 to run on my ARM Kali Linux.
M1 Pro Mac OS (ARM)
Kali Linux
Remember to give executable rights on the script!
chmod +x vol2install.sh