Heading to #BSidesAugusta this Saturday, Oct 24? Catch Volexity’s Director of Research, Andrew Case (@attrc.bsky.social), at 10:00 AM (Track 1 - Plug N Play) for his talk, “Finding Evil Fast: Windows Memory Triage with Volatility 3”.
#dfir #memoryforensics
#dfir #memoryforensics
October 22, 2026 at 7:33 PM
Heading to #BSidesAugusta this Saturday, Oct 24? Catch Volexity’s Director of Research, Andrew Case (@attrc.bsky.social), at 10:00 AM (Track 1 - Plug N Play) for his talk, “Finding Evil Fast: Windows Memory Triage with Volatility 3”.
#dfir #memoryforensics
#dfir #memoryforensics
Bronze Sandcastle steals access via Sandboxie DLL sideloading and in-memory backdoors. #CyberEspionage #DLLSideloading #ChinaThreat #Backdoor #MemoryForensics #Sophos https://thedailytechfeed.com/china-linked-bronze-sandcastle-uses-dll-sideloading-backdoors/
October 21, 2026 at 12:24 PM
Bronze Sandcastle steals access via Sandboxie DLL sideloading and in-memory backdoors. #CyberEspionage #DLLSideloading #ChinaThreat #Backdoor #MemoryForensics #Sophos https://thedailytechfeed.com/china-linked-bronze-sandcastle-uses-dll-sideloading-backdoors/
Submissions are coming in for the 14th annual #Volatility #PluginContest! This is your chance to contribute to open source forensics, gain community-wide visibility for your work + win a cash prize!
See the contest details here: volatilityfoundation.org/the-14th-ann...
#dfir #memoryforensics
See the contest details here: volatilityfoundation.org/the-14th-ann...
#dfir #memoryforensics
October 15, 2026 at 2:18 PM
Submissions are coming in for the 14th annual #Volatility #PluginContest! This is your chance to contribute to open source forensics, gain community-wide visibility for your work + win a cash prize!
See the contest details here: volatilityfoundation.org/the-14th-ann...
#dfir #memoryforensics
See the contest details here: volatilityfoundation.org/the-14th-ann...
#dfir #memoryforensics
Dumplyzer is an open-source, local-first memory forensics platform for Windows x64. Processes, network connections, timeline, VAD regions, and reconstructed binaries, analyzed fully offline.
#tool #DFIR #memoryforensics https://github.com/EmadAbedini/Dumplyzer
#tool #DFIR #memoryforensics https://github.com/EmadAbedini/Dumplyzer
October 9, 2026 at 7:28 PM
Dumplyzer is an open-source, local-first memory forensics platform for Windows x64. Processes, network connections, timeline, VAD regions, and reconstructed binaries, analyzed fully offline.
#tool #DFIR #memoryforensics https://github.com/EmadAbedini/Dumplyzer
#tool #DFIR #memoryforensics https://github.com/EmadAbedini/Dumplyzer
Join @attrc.bsky.social, Volexity’s Director of Research, at #BSidesNYC on Oct 17 at 10AM ET (Blue Track). In “Finding Evil Fast: Windows Memory Triage with Volatility 3,” he'll share five automated checks for quickly finding malicious activity in Windows memory.
#memoryforensics #dfir #volatility
#memoryforensics #dfir #volatility
October 9, 2026 at 4:09 PM
Join @attrc.bsky.social, Volexity’s Director of Research, at #BSidesNYC on Oct 17 at 10AM ET (Blue Track). In “Finding Evil Fast: Windows Memory Triage with Volatility 3,” he'll share five automated checks for quickly finding malicious activity in Windows memory.
#memoryforensics #dfir #volatility
#memoryforensics #dfir #volatility
Volatility New Release: #volatility3 v2.28.2 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
September 21, 2026 at 4:17 PM
Volatility New Release: #volatility3 v2.28.2 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
#memoryforensics #dfir
After that, we saw Sawa & Suzaki's "Analysis of Encryption Key Zeroization from System-wide Perspective" expose lingering #AES keys in memory via FPGA-based live forensics. (www.acsac.org/2025/p...) 3/5
#Cryptography #OSSecurity #MemoryForensics
#Cryptography #OSSecurity #MemoryForensics
August 20, 2026 at 2:00 PM
After that, we saw Sawa & Suzaki's "Analysis of Encryption Key Zeroization from System-wide Perspective" expose lingering #AES keys in memory via FPGA-based live forensics. (www.acsac.org/2025/p...) 3/5
#Cryptography #OSSecurity #MemoryForensics
#Cryptography #OSSecurity #MemoryForensics
Heading to Las Vegas next week? Connect with our team to discuss the latest in #DFIR, #memoryforensics, active threat actor campaigns we're tracking, and more!
Let us know when you'd like to meet: www.volexity.com/contact/meet...
Let us know when you'd like to meet: www.volexity.com/contact/meet...
Volexity is heading to Las Vegas! Members of our leadership, development, engineering & threat intelligence teams will be on site August 4–6.
If you would like to connect to discuss the latest in #DFIR, #memoryforensics, or the current threat landscape, let us know when you’d like to meet!
If you would like to connect to discuss the latest in #DFIR, #memoryforensics, or the current threat landscape, let us know when you’d like to meet!
Schedule a Meeting with Volexity in Las Vegas
If you would like to schedule time with members of Volexity's leadership, development, engineering, or threat intelligence teams to learn more about our recent investigations and next-generation memor...
www.volexity.com
July 28, 2026 at 6:08 PM
Heading to Las Vegas next week? Connect with our team to discuss the latest in #DFIR, #memoryforensics, active threat actor campaigns we're tracking, and more!
Let us know when you'd like to meet: www.volexity.com/contact/meet...
Let us know when you'd like to meet: www.volexity.com/contact/meet...
Volexity is heading to Las Vegas! Members of our leadership, development, engineering & threat intelligence teams will be on site August 4–6.
If you would like to connect to discuss the latest in #DFIR, #memoryforensics, or the current threat landscape, let us know when you’d like to meet!
If you would like to connect to discuss the latest in #DFIR, #memoryforensics, or the current threat landscape, let us know when you’d like to meet!
Schedule a Meeting with Volexity in Las Vegas
If you would like to schedule time with members of Volexity's leadership, development, engineering, or threat intelligence teams to learn more about our recent investigations and next-generation memor...
www.volexity.com
July 21, 2026 at 2:11 PM
Volexity is heading to Las Vegas! Members of our leadership, development, engineering & threat intelligence teams will be on site August 4–6.
If you would like to connect to discuss the latest in #DFIR, #memoryforensics, or the current threat landscape, let us know when you’d like to meet!
If you would like to connect to discuss the latest in #DFIR, #memoryforensics, or the current threat landscape, let us know when you’d like to meet!
Volexity has published details on a recent incident response investigation involving exploitation of multiple #0day vulnerabilities in SonicWall SMA 1000 series appliances. This full technical breakdown includes vulnerability workflow, malware analysis & IOCs.
#dfir #memoryforensics #threatintel
#dfir #memoryforensics #threatintel
Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation
In early July 2026, Volexity was engaged to perform an incident response investigation where it discovered a threat actor had successfully compromised multiple of the customer's SonicWall Secure Mobil...
www.volexity.com
July 17, 2026 at 10:34 PM
Volexity has published details on a recent incident response investigation involving exploitation of multiple #0day vulnerabilities in SonicWall SMA 1000 series appliances. This full technical breakdown includes vulnerability workflow, malware analysis & IOCs.
#dfir #memoryforensics #threatintel
#dfir #memoryforensics #threatintel
Great conversations at #FIRSTCON26 so far! Come say hello to the @volexity.com team at Booth 7 & see how to rapidly resolve your investigations and find what other tools are missing.
#DFIR #FIRSTCON #memoryforensics
#DFIR #FIRSTCON #memoryforensics
June 15, 2026 at 8:23 PM
Great conversations at #FIRSTCON26 so far! Come say hello to the @volexity.com team at Booth 7 & see how to rapidly resolve your investigations and find what other tools are missing.
#DFIR #FIRSTCON #memoryforensics
#DFIR #FIRSTCON #memoryforensics
Over the next few months, they will be working alongside our engineering and threat intelligence teams on core software development and #memoryforensics research.
Learn more about our program and future opportunities: www.volexity.com/internships/
#dfir
Learn more about our program and future opportunities: www.volexity.com/internships/
#dfir
Internships
A Volexity internship is an excellent way to build your resume. Apply your knowledge & expertise to some of the most challenging cybersecurity problems.
www.volexity.com
June 2, 2026 at 8:09 PM
Over the next few months, they will be working alongside our engineering and threat intelligence teams on core software development and #memoryforensics research.
Learn more about our program and future opportunities: www.volexity.com/internships/
#dfir
Learn more about our program and future opportunities: www.volexity.com/internships/
#dfir
@volexity.com’s detection & response efforts combined network visibility, host-based analysis, #threatintelligence & #memoryforensics, enabling us to discover these complex #0days being exploited in the wild.
Read our blog post for the original research mentioned: www.volexity.com/blog/2022/06...
Read our blog post for the original research mentioned: www.volexity.com/blog/2022/06...
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizat...
www.volexity.com
May 19, 2026 at 1:38 PM
@volexity.com’s detection & response efforts combined network visibility, host-based analysis, #threatintelligence & #memoryforensics, enabling us to discover these complex #0days being exploited in the wild.
Read our blog post for the original research mentioned: www.volexity.com/blog/2022/06...
Read our blog post for the original research mentioned: www.volexity.com/blog/2022/06...
@volexity.com Volcano Server & Volcano One v26.04.27 adds memory analysis for arm64 Windows, memory-only .NET assemblies, SRUM database, Linux systemd units, history & timers from RAM.
#memoryforensics #memoryanalysis #dfir
#memoryforensics #memoryanalysis #dfir
May 12, 2026 at 2:02 PM
@volexity.com Volcano Server & Volcano One v26.04.27 adds memory analysis for arm64 Windows, memory-only .NET assemblies, SRUM database, Linux systemd units, history & timers from RAM.
#memoryforensics #memoryanalysis #dfir
#memoryforensics #memoryanalysis #dfir
@volexity.com researchers will be presenting at THREE conferences in Las Vegas this August! Here’s where you can hear about some of our latest research in #memoryforensics and automated malicious script detection and de-obfuscation:
[1/5]
[1/5]
July 10, 2025 at 4:53 PM
@volexity.com researchers will be presenting at THREE conferences in Las Vegas this August! Here’s where you can hear about some of our latest research in #memoryforensics and automated malicious script detection and de-obfuscation:
[1/5]
[1/5]
This training course will be led by Andrew Case @attrc.bsky.social, Michael Ligh & Dave Lassalle. This is a great opportunity to gain valuable knowledge about #Volatility3 + learn all about #memoryforensics from Volatility core developers! Seats are filling up quickly so don't wait!
The next in-person Malware & Memory Forensics Training will be in Arlington VA, October 21–24, 2025! This is the only #memoryforensics course taught directly by the Volatility developers. Course registration includes a pass to #FTSCon!
Course details: memoryanalysis.net/courses-malw...
Course details: memoryanalysis.net/courses-malw...
July 9, 2025 at 8:54 PM
This training course will be led by Andrew Case @attrc.bsky.social, Michael Ligh & Dave Lassalle. This is a great opportunity to gain valuable knowledge about #Volatility3 + learn all about #memoryforensics from Volatility core developers! Seats are filling up quickly so don't wait!
@volexity.com Volcano Server & Volcano One v25.02.21 adds 300 new YARA rules; consistent Bash/ZSH history & sessions from Linux/macOS memory and files; and parses Linux systemd journals, macOS unified logs, and Windows USNs (search + timeline for all).
[1/2]
#dfir #memoryforensics #memoryanalysis
[1/2]
#dfir #memoryforensics #memoryanalysis
February 26, 2025 at 3:00 PM
@volexity.com Volcano Server & Volcano One v25.02.21 adds 300 new YARA rules; consistent Bash/ZSH history & sessions from Linux/macOS memory and files; and parses Linux systemd journals, macOS unified logs, and Windows USNs (search + timeline for all).
[1/2]
#dfir #memoryforensics #memoryanalysis
[1/2]
#dfir #memoryforensics #memoryanalysis
As reported in several of our recent blog posts, #memoryforensics of edge devices plays a critical role in helping to understand vulnerabilities and perform post-exploitation investigations: www.volexity.com/blog/tag/edg...
No ‘Ware To Hide!
No ‘Ware To Hide!
February 4, 2025 at 3:57 PM
As reported in several of our recent blog posts, #memoryforensics of edge devices plays a critical role in helping to understand vulnerabilities and perform post-exploitation investigations: www.volexity.com/blog/tag/edg...
No ‘Ware To Hide!
No ‘Ware To Hide!
On Thursday, Feb 6, @attrc.bsky.social will be at @wildwesthackinfest.bsky.social to present "Effectively Detecting Modern Code Injection Techniques with Volatility 3".
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
January 28, 2025 at 4:32 PM
On Thursday, Feb 6, @attrc.bsky.social will be at @wildwesthackinfest.bsky.social to present "Effectively Detecting Modern Code Injection Techniques with Volatility 3".
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
Conference agenda:
wildwesthackinfest.com/wild-west-ha....
#dfir #memoryforensics #Volatility3 @volatilityfoundation.org
At the end of the day, as an Incident Response Analyst doing digital forensics all day, everyone is waiting to know "Who Did It" from you.
So what's your attribution report?
#CyberSecurity #MalwareAnalysis #Attribution #MemoryForensics
So what's your attribution report?
#CyberSecurity #MalwareAnalysis #Attribution #MemoryForensics
November 16, 2024 at 9:41 AM
At the end of the day, as an Incident Response Analyst doing digital forensics all day, everyone is waiting to know "Who Did It" from you.
So what's your attribution report?
#CyberSecurity #MalwareAnalysis #Attribution #MemoryForensics
So what's your attribution report?
#CyberSecurity #MalwareAnalysis #Attribution #MemoryForensics
Finished day 19 yesterday but fell asleep before posting 🤣🤣. Memory forensics is definitely my. Love Volitility 2 and 3. #adventofcyber2023 #adventofcyber #z0ds3c #tryhackme #memoryforensics #cyberforensics #BlueTeam
December 20, 2023 at 3:31 PM
Finished day 19 yesterday but fell asleep before posting 🤣🤣. Memory forensics is definitely my. Love Volitility 2 and 3. #adventofcyber2023 #adventofcyber #z0ds3c #tryhackme #memoryforensics #cyberforensics #BlueTeam
MAL: REMnux - The Redux - I have just completed this room! Check it out: tryhackme.com/room/malremn... #tryhackme #ransomware #malware #remnux #memoryforensics #volatility #showcase #malwareanalysis #malremnuxv2 via @realtryhackme
TryHackMe | Cyber Security Training
An online platform for learning and teaching cyber security, all through your browser.
tryhackme.com
September 22, 2023 at 7:31 AM
MAL: REMnux - The Redux - I have just completed this room! Check it out: tryhackme.com/room/malremn... #tryhackme #ransomware #malware #remnux #memoryforensics #volatility #showcase #malwareanalysis #malremnuxv2 via @realtryhackme
Orochi: open-source framework for collaborative memory dump analysis built on Volatility 3, Django, and Dask. Multiple analysts can upload and correlate dumps simultaneously via web interface. #tool #memoryforensics https://github.com/LDO-CERT/orochi
July 5, 2026 at 11:44 AM
Orochi: open-source framework for collaborative memory dump analysis built on Volatility 3, Django, and Dask. Multiple analysts can upload and correlate dumps simultaneously via web interface. #tool #memoryforensics https://github.com/LDO-CERT/orochi
Aether detects process injection, hollowing, and reflective .NET loading in live Windows memory. Five-layer confidence model cuts FP. First-byte index achieves 50-100x faster signature scans. Dynamic JSON rules. #tool #memoryforensics https://bit.ly/4ecSvRx
June 6, 2026 at 5:09 PM
Aether detects process injection, hollowing, and reflective .NET loading in live Windows memory. Five-layer confidence model cuts FP. First-byte index achieves 50-100x faster signature scans. Dynamic JSON rules. #tool #memoryforensics https://bit.ly/4ecSvRx
💡Interested in #memoryforensics ? Follow
✅ @volexity.com
✅ @volatilityfoundation.org
✅ @attrc.bsky.social
✅ @rmettig.bsky.social
✅ @nolaforensix.bsky.social
➡️ more to come!
✅ @volexity.com
✅ @volatilityfoundation.org
✅ @attrc.bsky.social
✅ @rmettig.bsky.social
✅ @nolaforensix.bsky.social
➡️ more to come!
November 20, 2024 at 6:58 PM
💡Interested in #memoryforensics ? Follow
✅ @volexity.com
✅ @volatilityfoundation.org
✅ @attrc.bsky.social
✅ @rmettig.bsky.social
✅ @nolaforensix.bsky.social
➡️ more to come!
✅ @volexity.com
✅ @volatilityfoundation.org
✅ @attrc.bsky.social
✅ @rmettig.bsky.social
✅ @nolaforensix.bsky.social
➡️ more to come!