I rarely post here, but when I do... I just updated my Volatility autoruns plugin to be compatible with Volatility 3 (long overdue!) Here's the goodies: github.com/tomchop/vola... #dfir #forensics #cybersecurity
GitHub - tomchop/volatility3-autoruns: Autoruns plugin for the Volatility3 framework
Autoruns plugin for the Volatility3 framework. Contribute to tomchop/volatility3-autoruns development by creating an account on GitHub.
github.com
January 25, 2026 at 9:18 AM
I rarely post here, but when I do... I just updated my Volatility autoruns plugin to be compatible with Volatility 3 (long overdue!) Here's the goodies: github.com/tomchop/vola... #dfir #forensics #cybersecurity
Volatility New Release: #volatility3 v2.28.2 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
September 21, 2026 at 4:17 PM
Volatility New Release: #volatility3 v2.28.2 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
Wake up babe new Volatility just dropped: github.com/volatilit...
Releases · volatilityfoundation/volatility3
Volatility 3.0 development. Contribute to volatilityfoundation/volatility3 development by creating an account on GitHub.
github.com
January 17, 2025 at 9:11 PM
Wake up babe new Volatility just dropped: github.com/volatilit...
@volatilityfoundation.org New Release: #volatility3 v2.11.0 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
January 17, 2025 at 5:50 PM
@volatilityfoundation.org New Release: #volatility3 v2.11.0 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
New Release: #volatility3 v2.26.2 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
September 29, 2025 at 10:19 PM
New Release: #volatility3 v2.26.2 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
Volatility New Release: #volatility3 v2.27.0 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
January 30, 2026 at 2:30 PM
Volatility New Release: #volatility3 v2.27.0 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
This training course will be led by Andrew Case @attrc.bsky.social, Michael Ligh & Dave Lassalle. This is a great opportunity to gain valuable knowledge about #Volatility3 + learn all about #memoryforensics from Volatility core developers! Seats are filling up quickly so don't wait!
The next in-person Malware & Memory Forensics Training will be in Arlington VA, October 21–24, 2025! This is the only #memoryforensics course taught directly by the Volatility developers. Course registration includes a pass to #FTSCon!
Course details: memoryanalysis.net/courses-malw...
Course details: memoryanalysis.net/courses-malw...
July 9, 2025 at 8:54 PM
This training course will be led by Andrew Case @attrc.bsky.social, Michael Ligh & Dave Lassalle. This is a great opportunity to gain valuable knowledge about #Volatility3 + learn all about #memoryforensics from Volatility core developers! Seats are filling up quickly so don't wait!
Volatility New Release: #volatility3 v2.28.0 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
May 1, 2026 at 12:43 PM
Volatility New Release: #volatility3 v2.28.0 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
On Thursday, Feb 6, @attrc.bsky.social will be at @wildwesthackinfest.bsky.social to present "Effectively Detecting Modern Code Injection Techniques with Volatility 3".
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
January 28, 2025 at 4:32 PM
On Thursday, Feb 6, @attrc.bsky.social will be at @wildwesthackinfest.bsky.social to present "Effectively Detecting Modern Code Injection Techniques with Volatility 3".
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
Cat’s out of the bag. Sam Hanson and I are speaking at HOU.SEC.CON. on hunting and analyzing OT-related Golang and Python binaries. Andrew is covering memory-only malware detection with Volatility3. The agenda this year is fantastic. Check it out!
I am excited to announce that I will be speaking at
@hou-sec-con.bsky.social at the end of September in Houston! Be sure to check out my talk on Tuesday morning and my friend @mayahustle.bsky.social's talk on Wednesday afternoon. Full agenda at the following link:
web.cvent.com/event/9ba9c5...
@hou-sec-con.bsky.social at the end of September in Houston! Be sure to check out my talk on Tuesday morning and my friend @mayahustle.bsky.social's talk on Wednesday afternoon. Full agenda at the following link:
web.cvent.com/event/9ba9c5...
Agenda - HOU.SEC.CON. 2025
web.cvent.com
July 2, 2025 at 4:10 PM
Cat’s out of the bag. Sam Hanson and I are speaking at HOU.SEC.CON. on hunting and analyzing OT-related Golang and Python binaries. Andrew is covering memory-only malware detection with Volatility3. The agenda this year is fantastic. Check it out!
Coming this October: #FTSCon 2025, hosted by @volatilityfoundation.org! And this year there are TWO in-person training opportunities!👇
#dfir #memoryforensics #volatility3 #hardwarehackingbasics #grandideastudio
#dfir #memoryforensics #volatility3 #hardwarehackingbasics #grandideastudio
August 13, 2025 at 2:43 PM
Coming this October: #FTSCon 2025, hosted by @volatilityfoundation.org! And this year there are TWO in-person training opportunities!👇
#dfir #memoryforensics #volatility3 #hardwarehackingbasics #grandideastudio
#dfir #memoryforensics #volatility3 #hardwarehackingbasics #grandideastudio
Volatility: The volatile memory forensic extraction framework | Discussion
GitHub - volatilityfoundation/volatility3: Volatility 3.0 development
Volatility 3.0 development. Contribute to volatilityfoundation/volatility3 development by creating an account on GitHub.
github.com
February 22, 2026 at 2:00 PM
Volatility: The volatile memory forensic extraction framework | Discussion
@volatilityfoundation.org #PluginContest #Contender
Valentin Obst: btf2json focuses on large-scale Linux memory analysis, incorporating information in the vmlinuz file to create #Volatility3 symbol tables without the need for a full debug kernel.
#DFIR #memoryforensics
Valentin Obst: btf2json focuses on large-scale Linux memory analysis, incorporating information in the vmlinuz file to create #Volatility3 symbol tables without the need for a full debug kernel.
#DFIR #memoryforensics
March 27, 2025 at 3:28 PM
@volatilityfoundation.org #PluginContest #Contender
Valentin Obst: btf2json focuses on large-scale Linux memory analysis, incorporating information in the vmlinuz file to create #Volatility3 symbol tables without the need for a full debug kernel.
#DFIR #memoryforensics
Valentin Obst: btf2json focuses on large-scale Linux memory analysis, incorporating information in the vmlinuz file to create #Volatility3 symbol tables without the need for a full debug kernel.
#DFIR #memoryforensics
volatility3 v2.28.2 https://kitploit.com/en/posts/github-volatilityfoundation-volatility3-v2282
volatility3 v2.28.2 — Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state across Windows, Linux, and macOS. | Kitploit
Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state across Windows, Linux, and macOS.
kitploit.com
September 19, 2026 at 6:49 AM
volatility3 v2.28.2 https://kitploit.com/en/posts/github-volatilityfoundation-volatility3-v2282
This year we received 8 submissions from 7 different countries that included 20 plugins. It's exciting to see how #memoryforensics researchers continue to innovate & contribute to #Volatility3.
Special thanks to the core developers & previous winners who helped review this year's submissions!
Special thanks to the core developers & previous winners who helped review this year's submissions!
March 6, 2026 at 2:25 PM
This year we received 8 submissions from 7 different countries that included 20 plugins. It's exciting to see how #memoryforensics researchers continue to innovate & contribute to #Volatility3.
Special thanks to the core developers & previous winners who helped review this year's submissions!
Special thanks to the core developers & previous winners who helped review this year's submissions!
The 2024 @volatilityfoundation.org #PluginContest review is complete! We received 6 submissions from 6 countries for 7 #Volatility3 plugins, a Linux profile generation tool & 9 supporting utilities! We'll highlight each #Contender then announce winners on Friday, Mar 28.
#DFIR #memoryforensics
#DFIR #memoryforensics
March 26, 2025 at 12:26 PM
The 2024 @volatilityfoundation.org #PluginContest review is complete! We received 6 submissions from 6 countries for 7 #Volatility3 plugins, a Linux profile generation tool & 9 supporting utilities! We'll highlight each #Contender then announce winners on Friday, Mar 28.
#DFIR #memoryforensics
#DFIR #memoryforensics
Analyzing eBPF Modules in Linux Memory Forensics
In Linux memory forensics, especially with newer kernels, one major challenge is analyzing eBPF (extended Berkeley Packet Filter) modules in memory dumps. Traditional tools like Volatility3 struggle to extract `cmdline` and process information…
In Linux memory forensics, especially with newer kernels, one major challenge is analyzing eBPF (extended Berkeley Packet Filter) modules in memory dumps. Traditional tools like Volatility3 struggle to extract `cmdline` and process information…
Analyzing eBPF Modules in Linux Memory Forensics
In Linux memory forensics, especially with newer kernels, one major challenge is analyzing eBPF (extended Berkeley Packet Filter) modules in memory dumps. Traditional tools like Volatility3 struggle to extract `cmdline` and process information related to eBPF. Additionally, kernel-level access to eBPF is restricted in Auditd, similar to network-related auditing limitations. However, if you need to inspect eBPF modules in a memory dump, a GitHub project provides kernel symbols for Volatility3, facilitating memory analysis.
undercodetesting.com
June 3, 2025 at 9:56 AM
Analyzing eBPF Modules in Linux Memory Forensics
In Linux memory forensics, especially with newer kernels, one major challenge is analyzing eBPF (extended Berkeley Packet Filter) modules in memory dumps. Traditional tools like Volatility3 struggle to extract `cmdline` and process information…
In Linux memory forensics, especially with newer kernels, one major challenge is analyzing eBPF (extended Berkeley Packet Filter) modules in memory dumps. Traditional tools like Volatility3 struggle to extract `cmdline` and process information…
If anyone has any particular workflows in volatility3 that are particularly slow would you be willing to share info about the specifics? Plugins/functions/images/artifacts of interest?
October 21, 2024 at 4:55 AM
If anyone has any particular workflows in volatility3 that are particularly slow would you be willing to share info about the specifics? Plugins/functions/images/artifacts of interest?
📢 Workshop Announcement – DFRWS USA 2025
Join Andrew Case (Volexity) and Hala Ali (VCU) for:
"Modern Memory Forensics with Volatility 3."
Advance your skills in memory analysis with the latest Volatility framework.
📍 Chicago | 📅 July 22–25, 2025
#DFRWS2025 #MemoryForensics #Volatility3 #DFIR
Join Andrew Case (Volexity) and Hala Ali (VCU) for:
"Modern Memory Forensics with Volatility 3."
Advance your skills in memory analysis with the latest Volatility framework.
📍 Chicago | 📅 July 22–25, 2025
#DFRWS2025 #MemoryForensics #Volatility3 #DFIR
April 17, 2025 at 2:53 PM
📢 Workshop Announcement – DFRWS USA 2025
Join Andrew Case (Volexity) and Hala Ali (VCU) for:
"Modern Memory Forensics with Volatility 3."
Advance your skills in memory analysis with the latest Volatility framework.
📍 Chicago | 📅 July 22–25, 2025
#DFRWS2025 #MemoryForensics #Volatility3 #DFIR
Join Andrew Case (Volexity) and Hala Ali (VCU) for:
"Modern Memory Forensics with Volatility 3."
Advance your skills in memory analysis with the latest Volatility framework.
📍 Chicago | 📅 July 22–25, 2025
#DFRWS2025 #MemoryForensics #Volatility3 #DFIR
We will announce the @volatilityfoundation.org #PluginContest winners tomorrow, Friday, March 28, so stay tuned!
#DFIR #memoryforensics #Volatility3
#DFIR #memoryforensics #Volatility3
March 27, 2025 at 8:51 PM
We will announce the @volatilityfoundation.org #PluginContest winners tomorrow, Friday, March 28, so stay tuned!
#DFIR #memoryforensics #Volatility3
#DFIR #memoryforensics #Volatility3
Syd: an air-gapped Cybersecurity Assistant that runs entirely offline using local LLMs. It integrates with common security Tools (Nmap, Volatility3, Metasploit, YARA) and provides intelligent Analysis and CVE lookups without sending any data #Infosec #LLM gitlab.com/sydsec1/Syd
Sydsec / Syd · GitLab
Air-gapped cybersecurity assistant for security professionals. 100% offline AI-powered analysis tool for Nmap, Volatility, BloodHound, Metasploit, YARA, and more. Built for environments where cloud…
gitlab.com
December 10, 2025 at 8:10 PM
Syd: an air-gapped Cybersecurity Assistant that runs entirely offline using local LLMs. It integrates with common security Tools (Nmap, Volatility3, Metasploit, YARA) and provides intelligent Analysis and CVE lookups without sending any data #Infosec #LLM gitlab.com/sydsec1/Syd
MalChela 2.2 “REMnux” Release
More tools. More Docs. More Power.
#DFIR #MalwareAnalysis #YaraX #Volatility #Tshark #MalChela
More tools. More Docs. More Power.
#DFIR #MalwareAnalysis #YaraX #Volatility #Tshark #MalChela
MalChela 2.2 “REMnux” Release
MalChela’s 2.2 update is packed with practical and platform-friendly improvements. It includes native support for REMnux, better tool settings, and deeper integrations with analysis tools like YARA-X, Tshark, Volatility3, and the newly improved fileanalyzer module. 🦀 REMnux Edition: Built-In Support, Zero Tweaks When the GUI loads a REMnux-specific tools.yaml profile, it enters REMnux mode.
bakerstreetforensics.com
May 21, 2025 at 11:51 AM
MalChela 2.2 “REMnux” Release
More tools. More Docs. More Power.
#DFIR #MalwareAnalysis #YaraX #Volatility #Tshark #MalChela
More tools. More Docs. More Power.
#DFIR #MalwareAnalysis #YaraX #Volatility #Tshark #MalChela
今日のQiitaトレンド
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く
AIエージェントに専門的なセキュリティ知識を付与するオープンソースの知識ベース、Anthropic-Cybersecurity-Skillsの解説記事です。
817個の構造化された実務手順を収録し、主要な業界フレームワークに紐付けています。
Anthropic公式ではないコミュニティ主導のプロジェクトであり、AIにシニアアナリストのような判断ワークフローを提供します。
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く
AIエージェントに専門的なセキュリティ知識を付与するオープンソースの知識ベース、Anthropic-Cybersecurity-Skillsの解説記事です。
817個の構造化された実務手順を収録し、主要な業界フレームワークに紐付けています。
Anthropic公式ではないコミュニティ主導のプロジェクトであり、AIにシニアアナリストのような判断ワークフローを提供します。
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く #Security - Qiita
はじめに 「AIエージェントにペネトレーションテスト（侵入テスト）やインシデント対応を任せたい」。 そう考える人は増えていますが、いざ任せてみると、エージェントが現場の細かい道具立てを知らないことに気づきます。 たとえば、Volatility3（メモリの中身を解析するツー...
qiita.com
June 26, 2026 at 11:13 PM
今日のQiitaトレンド
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く
AIエージェントに専門的なセキュリティ知識を付与するオープンソースの知識ベース、Anthropic-Cybersecurity-Skillsの解説記事です。
817個の構造化された実務手順を収録し、主要な業界フレームワークに紐付けています。
Anthropic公式ではないコミュニティ主導のプロジェクトであり、AIにシニアアナリストのような判断ワークフローを提供します。
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く
AIエージェントに専門的なセキュリティ知識を付与するオープンソースの知識ベース、Anthropic-Cybersecurity-Skillsの解説記事です。
817個の構造化された実務手順を収録し、主要な業界フレームワークに紐付けています。
Anthropic公式ではないコミュニティ主導のプロジェクトであり、AIにシニアアナリストのような判断ワークフローを提供します。
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く
#Security #OSS #生成AI #AIエージェント #ClaudeCode
#Security #OSS #生成AI #AIエージェント #ClaudeCode
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く - Qiita
はじめに 「AIエージェントにペネトレーションテスト（侵入テスト）やインシデント対応を任せたい」。 そう考える人は増えていますが、いざ任せてみると、エージェントが現場の細かい道具立てを知らないことに気づきます。 たとえば、Volatility3（メモリの中身を解析するツー...
qiita.com
June 26, 2026 at 1:20 PM
AIエージェントを“セキュリティのプロ”に変える817個のスキル集 — Claude Code / Codex / Cursor / Copilot対応OSSを読み解く
#Security #OSS #生成AI #AIエージェント #ClaudeCode
#Security #OSS #生成AI #AIエージェント #ClaudeCode
Volatility3で始めるメモリフォレンジック入門 (むちぽぽ) が、紀伊國屋電子書籍の特価で990円引きの、990円(50%OFF)+9ポイント還元になりました。
Volatility3で始めるメモリフォレンジック入門
著者：むちぽぽ(著) 出版：インプレス NextPublishing 2023/10/20(金)配信
5leaf.jp
August 25, 2026 at 7:19 PM
Volatility3で始めるメモリフォレンジック入門 (むちぽぽ) が、紀伊國屋電子書籍の特価で990円引きの、990円(50%OFF)+9ポイント還元になりました。