Memory Image file created with FTK - autopsy showing error message in


I managed to capture the memory using FTK imager and the file is memdump.mem.

I autopsy, I have activated the experimental mode and also installed the python plugin for volatility and also the file.

Still, the result of the analysis is showing error in volatility-related plugins

what could be the reason?

I don’t know anything about the python plug-in, but I might be able to help with the data source processor (Autopsy User Documentation: Volatility Data Source Processor). Can you copy in some of the errors? (To get to the logs, see Autopsy User Documentation: Troubleshooting). Have you tried just running Volatility on your image outside of Autopsy?