This repository contains Volatility with additions made to support Windows 10 memory compression. If a supported Windows 10 profile is used, it will attempt to apply the corresponding address space that enables memory decompression.
This allows plugins to read previously unreadable, compressed data. If a compressed page is unable to be read, it has likely been paged-out and cannot be recovered.
Source code and additional information may be found here: https://github.com/mandiant/win10_volatility