#memoryforensics #opensource #dfir
#memoryforensics #opensource #dfir
Details here: volatilityfoundation.org/the-12th-ann...
Submission Deadline: 31 December 2024
#dfir #memoryforensics
Details here: volatilityfoundation.org/the-12th-ann...
Submission Deadline: 31 December 2024
#dfir #memoryforensics
Special thanks to the core developers & previous winners who helped review submissions!
Special thanks to the core developers & previous winners who helped review submissions!
Details here: volatilityfoundation.org/the-12th-ann...
Submission Deadline: 31 December 2024
#dfir #memoryforensics
#DFIR #memoryforensics
#DFIR #memoryforensics
Daniel Baier for XRFM Inspector
See the full Contest Results in our blog post: volatilityfoundation.org/the-2025-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
Daniel Baier for XRFM Inspector
See the full Contest Results in our blog post: volatilityfoundation.org/the-2025-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
Kartik N. Iyer + Parag H. Rughani: Thread Local Storage (TLS) Callback is a feature-rich plugin designed to detect, analyze & disassemble TLS callbacks in memory samples.
#DFIR #memoryforensics
Kartik N. Iyer + Parag H. Rughani: Thread Local Storage (TLS) Callback is a feature-rich plugin designed to detect, analyze & disassemble TLS callbacks in memory samples.
#DFIR #memoryforensics
Valentin Obst: btf2json focuses on large-scale Linux memory analysis, incorporating information in the vmlinuz file to create #Volatility3 symbol tables without the need for a full debug kernel.
#DFIR #memoryforensics
Valentin Obst: btf2json focuses on large-scale Linux memory analysis, incorporating information in the vmlinuz file to create #Volatility3 symbol tables without the need for a full debug kernel.
#DFIR #memoryforensics
Submission Deadline: 31 December 2025
#dfir #memoryforensics
Submission Deadline: 31 December 2025
#dfir #memoryforensics
#memoryforensics
#memoryforensics
Submission Deadline: 31 December 2026
#dfir #memoryforensics
Submission Deadline: 31 December 2026
#dfir #memoryforensics
Valentin Obst for btf2json
Read the full Contest Results:
volatilityfoundation.org/the-2024-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
Valentin Obst for btf2json
Read the full Contest Results:
volatilityfoundation.org/the-2024-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
Details here: volatilityfoundation.org/the-12th-ann...
Submission Deadline: 31 December 2024
#dfir #memoryforensics
#DFIR #memoryforensics #Volatility3
#DFIR #memoryforensics #Volatility3
#dfir #memoryforensics
#dfir #memoryforensics
Thomas Clarke: Image Extraction, NSRL Filtering & Image Classifiers plugins help investigators extract memory-resident images & sort those images using numerous classifiers.
#DFIR #memoryforensics
Thomas Clarke: Image Extraction, NSRL Filtering & Image Classifiers plugins help investigators extract memory-resident images & sort those images using numerous classifiers.
#DFIR #memoryforensics
Shusei Tomonaga: ETW Scan is an investigative tool to aid security researchers, reverse engineers & incident responders in leveraging Windows Event Tracing for Windows (ETW) data for enhanced threat hunting & analysis.
#DFIR #memoryforensics
Shusei Tomonaga: ETW Scan is an investigative tool to aid security researchers, reverse engineers & incident responders in leveraging Windows Event Tracing for Windows (ETW) data for enhanced threat hunting & analysis.
#DFIR #memoryforensics
Rosario Matteo Grammatico: The Windows Defender Tampering plugin aims to help investigators identify a defense evasion technique that involves disabling or removing features of Microsoft Windows Defender.
#DFIR #memoryforensics
Rosario Matteo Grammatico: The Windows Defender Tampering plugin aims to help investigators identify a defense evasion technique that involves disabling or removing features of Microsoft Windows Defender.
#DFIR #memoryforensics
Sylvain Peyrefitte: ScringsScan + VadScringsScan provide syntax-aware scanning for 6 languages in kernel memory in Linux, macOS & Windows + in-process VADs in Windows, improving in-memory script payloads searching.
#DFIR #memoryforensics
Sylvain Peyrefitte: ScringsScan + VadScringsScan provide syntax-aware scanning for 6 languages in kernel memory in Linux, macOS & Windows + in-process VADs in Windows, improving in-memory script payloads searching.
#DFIR #memoryforensics
#PluginContest! And the First Place is:
Daniel Baier for XFRM Inspector
Read the full Contest Results in our blog post:
volatilityfoundation.org/the-2025-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
#PluginContest! And the First Place is:
Daniel Baier for XFRM Inspector
Read the full Contest Results in our blog post:
volatilityfoundation.org/the-2025-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
This contest is designed to encourage research & development in the field of #memoryanalysis. Every year, contributions from all around the world continue to help build the next generation of #memoryforensics.
This contest is designed to encourage research & development in the field of #memoryanalysis. Every year, contributions from all around the world continue to help build the next generation of #memoryforensics.