1 files changed, 22 insertions, 0 deletions
diff --git a/pkgs/tools/security/volatility/default.nix b/pkgs/tools/security/volatility/default.nix
new file mode 100644
index 000000000000..41e227cee7e3
--- /dev/null
+++ b/pkgs/tools/security/volatility/default.nix
@@ -0,0 +1,22 @@
+{ stdenv, fetchurl, buildPythonPackage, pycrypto }:
+
+buildPythonPackage rec {
+  namePrefix = "";
+  name = "volatility-2.3.1";
+
+  src = fetchurl {
+    url = "http://volatility.googlecode.com/files/${name}.tar.gz";
+    sha256 = "bb1411fc671e0bf550a31e534fb1991b2f940f1dce1ebe4ce2fb627aec40726c";
+  };
+
+  doCheck = false;
+
+  propagatedBuildInputs = [ pycrypto ];
+
+  meta = with stdenv.lib; {
+    homepage = https://code.google.com/p/volatility;
+    description = "advanced memory forensics framework";
+    maintainers = with maintainers; [ bosu ];
+    license = "GPLv2+";
+  };
+}