gentoo-overlay/app-forensics/volatility3/metadata.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
	<maintainer type="person" proxied="yes">
		<email>mario.haustein@hrz.tu-chemnitz.de</email>
		<name>Mario Haustein</name>
	</maintainer>
	<maintainer type="person">
		<email>sam@gentoo.org</email>
		<name>Sam James</name>
	</maintainer>
	<longdescription>
		Volatility is the world's most widely used framework for extracting
		digital artifacts from volatile memory (RAM) samples. The extraction
		techniques are performed completely independent of the system being
		investigated but offer visibility into the runtime state of the system.
	</longdescription>
	<use>
		<flag name='crypt'>support plugins that decrypt passwords, password hashes, etc.</flag>
		<flag name='disasm'>support plugins that perform malware analysis and disassemble code</flag>
		<flag name='jsonschema'>improve error messages regarding improperly configured ISF files</flag>
		<flag name='leechcore'>support memory acquisition via leechcore</flag>
		<flag name='snappy'>support AVMLs native compression format</flag>
		<flag name='yara'>support YARA pattern matching engine</flag>
	</use>
	<upstream>
		<remote-id type="github">volatilityfoundation/volatility3</remote-id>
		<remote-id type="pypi">volatility3</remote-id>
	</upstream>
</pkgmetadata>