Volatility can be used to identify and analyze active, terminated, and hidden connections along with ports and processes. All protocols are supported and Volatility also reveals details of ports used by processes including the times they were started.

For these purposes, we use the following three commands:

• connections
• connscan
• sockets