Exterro FTK Central vs Volatility 3
Exterro FTK Central
exterro.comVolatility 3
volatilityfoundation.orgSide by side
| Figure | Exterro FTK Central | Volatility 3 |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 0 | 1 |
| Spec score · Computer Forensics Software | 5.9 (#19) | 7.3 (#12) |
| Spec score · Digital Forensics Software | 5.9 (#29) | 7.3 (#22) |
Plans
In their own words
Exterro FTK Central
Exterro FTK Central has no write-up on Specifiction yet; its figures are above.
Volatility 3
Volatility 3 is a free, open-source framework for extracting digital artifacts from volatile memory (RAM) samples. It gives investigators visibility into a system's runtime state and focuses on memory forensics rather than disk imaging or mobile forensics. It supports memory images from Windows, macOS, and Linux, and offers CSV, JSON, JSONL, pretty, and quick export formats.
Volatility 3 requires Python 3.8.0 or later and is published on PyPI. Windows symbols can be queried, downloaded, generated, and cached when missing; Mac and Linux symbol tables must be produced manually. A 2024 release added support for Amazon S3 and Google Cloud Storage. Documentation is generated from doc strings with Sphinx and available online. Bug reports go to GitHub Issues, while community questions can be taken to Slack. The license permits free use, sharing, and building, but requires public source sharing for additions made available to others. It provides the software as is, without warranty or condition to the extent allowed by law.