#MemoryForensics
LightNews LightNews
gleeda.bsky.social
💡Interested in #memoryforensics ? Follow

✅ @volexity.com
✅ @volatilityfoundation.org
✅ @attrc.bsky.social
✅ @rmettig.bsky.social
✅ @nolaforensix.bsky.social

➡️ more to come!
November 20, 2024 at 6:58 PM
binaryz0ne.bsky.social
MemProcFS is a GREAT Memory Forensics tool. Sharing here in case you have not checked this before! #DFIR #MemoryForensics #MemProcFS

github.com/ufrisk/MemPr...
GitHub - ufrisk/MemProcFS: MemProcFS
MemProcFS. Contribute to ufrisk/MemProcFS development by creating an account on GitHub.
github.com
November 14, 2024 at 11:32 PM
volatilityfoundation.org
New Release: #volatility3 v2.26.2 - visit github.com/volatilityfo... for details and downloads.

#memoryforensics #dfir
September 29, 2025 at 10:19 PM
volatilityfoundation.org
Volatility New Release: #volatility3 v2.28.2 - visit github.com/volatilityfo... for details and downloads.

#memoryforensics #dfir
September 21, 2026 at 4:17 PM
volatilityfoundation.org
Volatility New Release: #volatility3 v2.27.0 - visit github.com/volatilityfo... for details and downloads.

#memoryforensics #dfir
January 30, 2026 at 2:30 PM
volatilityfoundation.org
And that’s it! The 2025 #Volatility #PluginContest is now closed. Stay tuned for winner announcements in the coming weeks! And good luck to all contenders!
#memoryforensics #opensource #dfir
volatilityfoundation.org Volatility @volatilityfoundation.org · Dec 31
Today is the last day to submit entries to the #PluginContest! This is your chance to gain industry-wide visibility for your work, contribute to an important open-source project, and compete for cash prizes! More details below!👇
January 1, 2026 at 3:22 PM
volexity.com
This training course will be led by Andrew Case @attrc.bsky.social, Michael Ligh & Dave Lassalle. This is a great opportunity to gain valuable knowledge about #Volatility3 + learn all about #memoryforensics from Volatility core developers! Seats are filling up quickly so don't wait!
volatilityfoundation.org Volatility @volatilityfoundation.org · Jul 9
The next in-person Malware & Memory Forensics Training will be in Arlington VA, October 21–24, 2025! This is the only #memoryforensics course taught directly by the Volatility developers. Course registration includes a pass to #FTSCon!

Course details: memoryanalysis.net/courses-malw...
An image of Michael Hale Ligh, a Volatility core developer, leading a training session. There are students in the foreground focused on what is being discussed. In the background, out the window, is the Washington Monument. There is a top yellow banner that reads IN-PERSON TRAINING, and a blue text box on the bottom that reads "Malware & Memory Forensics Training, October 21-24, 2025 | Arlington VA"
July 9, 2025 at 8:54 PM
volexity.com
@volexity.com Volcano Server & Volcano One v26.04.27 adds memory analysis for arm64 Windows, memory-only .NET assemblies, SRUM database, Linux systemd units, history & timers from RAM.

#memoryforensics #memoryanalysis #dfir
May 12, 2026 at 2:02 PM
volatilityfoundation.org
Coming up the week of October 20th: #FTSCon + TWO in-person #training opportunities!

Learn more here: volatilityfoundation.org/from-the-sou...

#dfir #memoryforensics #hardwarehacking
September 29, 2025 at 5:16 PM
volatilityfoundation.org
@volatilityfoundation.org New Release: #volatility3 v2.11.0 - visit github.com/volatilityfo... for details and downloads.

#memoryforensics #dfir
The latest Volatility 3 is now available at https://github.com/volatilityfoundation/volatility3/releases
January 17, 2025 at 5:50 PM
volatilityfoundation.org
Volatility New Release: #volatility3 v2.28.0 - visit github.com/volatilityfo... for details and downloads.

#memoryforensics #dfir
May 1, 2026 at 12:43 PM
volexity.com
On Thursday, Feb 6, @attrc.bsky.social will be at @wildwesthackinfest.bsky.social to present "Effectively Detecting Modern Code Injection Techniques with Volatility 3".

Conference agenda:
wildwesthackinfest.com/wild-west-ha.... 



#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
Volexity’s Andrew Case will be presenting his talk Effectively Detecting Modern Code Injection Techniques with Volatility 3 at Wild West Hackin’ Fest in Denver, CO on Thursday, February 6, 2024 at 3:00PM.
January 28, 2025 at 4:32 PM
stringsvsatoms.bsky.social
At the end of the day, as an Incident Response Analyst doing digital forensics all day, everyone is waiting to know "Who Did It" from you.

So what's your attribution report?

#CyberSecurity #MalwareAnalysis #Attribution #MemoryForensics
November 16, 2024 at 9:41 AM
volatilityfoundation.org
The 12th annual @volatilityfoundation.org #PluginContest is OPEN for submissions! Contribute to the open source forensics community, gain visibility for your work + win prizes!

Details here: volatilityfoundation.org/the-12th-ann...

Submission Deadline: 31 December 2024

#dfir #memoryforensics
The 12th Annual Volatility Plugin Contest is Open!
The Volatility Plugin Contest is officially open for submissions! This is your opportunity to directly contribute to the open source forensics community and put groundbreaking capabilities into the…
volatilityfoundation.org
November 21, 2024 at 3:51 PM
volatilityfoundation.org
As highlighted this week, the #PluginContest demonstrates that #memoryforensics researchers continue to innovate + contribute to #Volatility!

Special thanks to the core developers & previous winners who helped review submissions!
March 28, 2025 at 2:17 PM
volexity.com
Heading to Las Vegas next week? Connect with our team to discuss the latest in #DFIR, #memoryforensics, active threat actor campaigns we're tracking, and more!
Let us know when you'd like to meet: www.volexity.com/contact/meet...
volexity.com Volexity @volexity.com · Jul 21
Volexity is heading to Las Vegas! Members of our leadership, development, engineering & threat intelligence teams will be on site August 4–6.

If you would like to connect to discuss the latest in #DFIR, #memoryforensics, or the current threat landscape, let us know when you’d like to meet!
Schedule a Meeting with Volexity in Las Vegas
If you would like to schedule time with members of Volexity's leadership, development, engineering, or threat intelligence teams to learn more about our recent investigations and next-generation memor...
www.volexity.com
July 28, 2026 at 6:08 PM
volatilityfoundation.org
Coming this October: #FTSCon 2025, hosted by @volatilityfoundation.org! And this year there are TWO in-person training opportunities!👇

#dfir #memoryforensics #volatility3 #hardwarehackingbasics #grandideastudio
August 13, 2025 at 2:43 PM
volexity.com
@volexity.com Volcano Server & Volcano One v25.02.21 adds 300 new YARA rules; consistent Bash/ZSH history & sessions from Linux/macOS memory and files; and parses Linux systemd journals, macOS unified logs, and Windows USNs (search + timeline for all).
[1/2]

#dfir #memoryforensics #memoryanalysis
An image of the blue and orange Volexity Volcano logo with a New Release banner to announce the release of Volcano Server & Volcano One v25.02.21
February 26, 2025 at 3:00 PM
volexity.com
@volexity.com researchers will be presenting at THREE conferences in Las Vegas this August! Here’s where you can hear about some of our latest research in #memoryforensics and automated malicious script detection and de-obfuscation:
[1/5]
Volexity is going to Vegas! This image also includes the iconic "Welcome to Fabulous Las Vegas Nevada" sign.
July 10, 2025 at 4:53 PM
joshlemon.bsky.social
Memory Analysis for #Linux has always been a bit hit-or-miss. Trail of Bits has released a tool called #mquire that doesn't require debug symbols for the originating Kernel.

#MemoryForensics #IncidentResponse #DFIR #DigitalForensics
March 1, 2026 at 6:41 AM
volexity.com
Great conversations at #FIRSTCON26 so far! Come say hello to the @volexity.com team at Booth 7 & see how to rapidly resolve your investigations and find what other tools are missing.

#DFIR #FIRSTCON #memoryforensics
June 15, 2026 at 8:23 PM
volexity.com
Volexity has published details on a recent incident response investigation involving exploitation of multiple #0day vulnerabilities in SonicWall SMA 1000 series appliances. This full technical breakdown includes vulnerability workflow, malware analysis & IOCs.

#dfir #memoryforensics #threatintel
Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation
In early July 2026, Volexity was engaged to perform an incident response investigation where it discovered a threat actor had successfully compromised multiple of the customer's SonicWall Secure Mobil...
www.volexity.com
July 17, 2026 at 10:34 PM
volexity.com
As reported in several of our recent blog posts, #memoryforensics of edge devices plays a critical role in helping to understand vulnerabilities and perform post-exploitation investigations: www.volexity.com/blog/tag/edg...



No ‘Ware To Hide!
February 4, 2025 at 3:57 PM
volatilityfoundation.org
@volatilityfoundation.org #PluginContest #Contender
Kartik N. Iyer + Parag H. Rughani: Thread Local Storage (TLS) Callback is a feature-rich plugin designed to detect, analyze & disassemble TLS callbacks in memory samples.
#DFIR #memoryforensics
March 27, 2025 at 1:06 PM
volatilityfoundation.org
We are excited to announce the First Place winner of the 2025 #Volatility #PluginContest is:

Daniel Baier for XRFM Inspector

See the full Contest Results in our blog post: volatilityfoundation.org/the-2025-vol...

Congrats to all winners & thank you to all participants!

#DFIR #memoryforensics
The 2025 Volatility Plugin Contest results are in!
Results from the 13th Annual Volatility Plugin Contest are in! We received 8 submissions from 7 different countries that included 20 plugins. Contest submissions included a range of features…
volatilityfoundation.org
March 6, 2026 at 2:25 PM