取证工具:VolatilityV3:https://github.com/volatilityfoundation/volatility3V2:https://github.com/volatilityfoundation/volatilityVolatility2.6.pdfVolatility基本使用命令./vol.py‐f[image]­‐profile=[profile][plugin]-f后面需要跟绝对路