diff --git a/pentoo/pentoo-forensics/pentoo-forensics-2019.4.ebuild b/pentoo/pentoo-forensics/pentoo-forensics-2020.1.ebuild
similarity index 78%
rename from pentoo/pentoo-forensics/pentoo-forensics-2019.4.ebuild
rename to pentoo/pentoo-forensics/pentoo-forensics-2020.1.ebuild
index 4f781945d..95c6e07af 100644
--- a/pentoo/pentoo-forensics/pentoo-forensics-2019.4.ebuild
+++ b/pentoo/pentoo-forensics/pentoo-forensics-2020.1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=7
@@ -8,13 +8,12 @@ HOMEPAGE="http://www.pentoo.ch"
 
 LICENSE="GPL-3"
 SLOT="0"
-IUSE="pentoo-full"
+IUSE="pentoo-extra pentoo-full"
 KEYWORDS="~amd64 ~x86"
 
 PDEPEND="
 	sys-fs/extundelete
 	app-forensics/sleuthkit
-	app-forensics/volatility
 	sys-fs/ddrescue
 
 	pentoo-full? (
@@ -36,7 +35,11 @@ PDEPEND="
 		sys-apps/dcfldd
 		sys-block/partimage
 		sys-fs/dd-rescue
-	)"
+	)
+	pentoo-extra? (
+		app-forensics/volatility
+	)
+	"
 
-#https://github.com/arxsys/dff/issues/23
-#	app-forensics/dff
+#python2 only
+#https://github.com/volatilityfoundation/volatility/issues/693