Netscan Volatility, netscan module class NetScan(context, config_path, progress_callback=None) [source] Bases: PluginInterface, TimeLinerInterface Scans for network objects present in a particular windows memory image. A list of network objects found by scanning the layer_name layer for network pool signatures. Scans for network objects present in a particular windows memory image. 6624-volatility-netscan. This finds TCP endpoints, TCP listeners, UDP endpoints, and UDP listeners. netscan and windows. plugins. json files such as netscan-win10-19041-x64 which is the last available one that was developed. We can use the Volatility netscan plugin to enumerate network communication to our system and what process is responsible for the connection. windows. fwtg, okb, x6z, ln, lrmz, lse, 9xnme, vfpaop95e, iz4iqpo, d4,