@volatility

Official account of the Volatility Memory Analysis Project and Windows Malware and Memory Forensics Training. https://xitter.cf/t.co/A4TZ1FOjpg

Joined August 2008
The 14th annual @volatility #PluginContest is officially OPEN! This is your chance to contribute to open source forensics, gain community-wide visibility for your work, and win a cash prize! volatilityfoundation.org/the… Submission Deadline: 31 December 2026 #dfir #memoryforensics
1
13
14
2,485
volatility retweeted
Heading to @BSidesAugusta this Saturday, October 24? Catch @Volexity's Director of Research, Andrew Case (@attrc), at 10:00 AM (Track 1 - Plug N Play) for his talk, “Finding Evil Fast: Windows Memory Triage with Volatility 3”. See the full conference schedule here: pretalx.com/bsidesaugusta-20… #memoryforensics #dfir #volatility
3
3
470
volatility retweeted
I will be speaking at @BSidesAugusta this weekend on rapid triage of Windows systems with @volatility 3! Please come say hello if you will be around.
1
4
1
663
volatility retweeted
"Security Through Obscurity Is Dead and LLMs Killed It." @moyix's @UnpromptedAU talk: a cat pic you can’t photocopy and an emulated HP printer that "runs out" of toner. Send this to your friends and coworkers who think their secrets are safe inside a compiled binary: unprompted.au/videos/securit…
1
10
20
2,783
Submissions are coming in for the 14th annual #Volatility #PluginContest! This is your chance to contribute to open source forensics, gain community-wide visibility for your work + win a cash prize! See the contest details here: volatilityfoundation.org/the… #dfir #memoryforensics
2
3
679
volatility retweeted
Join @attrc, Volexity’s Director of Research, at @BSidesNYC on Saturday, October 17 at 10:00 AM ET (Blue Track). In “Finding Evil Fast: Windows Memory Triage with Volatility 3,” he will share five automated checks for quickly finding malicious activity in Windows memory. See the full conference schedule here: bsidesnyc.org/schedule/ #memoryforensics #dfir #volatility
6
1
11
2,404
volatility retweeted
Memory-only malware leaves no trace on the file system and is commonly used by threat actors ranging from criminal organizations to ransomware operators to APT groups. To detect such malware, memory forensics must be performed to deeply examine the state of a potential victim system. If your organization isn't performing memory forensics then you are missing the malware that actually matters!
2
15
72
19,412
volatility retweeted
The 14th annual @volatility #PluginContest is officially OPEN! This is your chance to contribute to open source forensics, gain community-wide visibility for your work, and win a cash prize! volatilityfoundation.org/the… Submission Deadline: 31 December 2026 #dfir #memoryforensics
1
13
14
2,485
volatility retweeted
Currently watching @attrc from @Volexity do his @BlackHatEvents arsenal talk on new @volatility memory forensics capabilities that were just released! #blackhat2026
3
2
25
1,859
volatility retweeted
I am very excited to announce that my @volatility 3 workshop with David McDonald and Pierre Breton was accepted for @defcon this summer!!
2
9
58
5,282
.@volatility New Release: #volatility3 v2.28.0 - visit github.com/volatilityfoundat… for details and downloads. #memoryforensics #dfir
35
2
108
9,199
volatility retweeted
I am excited to announce that I will be speaking at @bsidesnash on May 15th. Be sure to attend to see all the latest @volatility 3 plugins against the most sophisticated and devastating malware from the wild!
1
8
16
2,769
volatility retweeted
Memory-only malware leaves no trace on the file system & is commonly used by threat actors ranging from criminal organizations to ransomware operators to APTs. In our @volatility 3 training, students gain deep hands on experience analyzing such threats: memoryanalysis.net/courses-m…
35
1
136
11,108
We have announced the winners of the 2025 @volatility #PluginContest! And the First Place is: Daniel Baier for XFRM Inspector Read the full Contest Results in our blog post: volatilityfoundation.org/the… Congrats to all winners & thank you to all participants! #DFIR #memoryforensics
The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins! We will be highlighting each #Contender & the winners will be announced on Friday! #DFIR #memoryforensics
6
11
3,793
We are excited to announce the 2025 @volatility #PluginContest First Place winner is: Daniel Baier for XRFM Inspector See the full Contest Results: volatilityfoundation.org/the… Congrats to all winners & thank you to all participants! #DFIR #memoryforensics
The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins! We will be highlighting each #Contender & the winners will be announced on Friday! #DFIR #memoryforensics
1
7
11
3,580
The annual @volatility #PluginContest continues to highlight how #memoryforensics researchers are innovating + contributing to #Volatility3! Special thanks to the core developers & previous winners who helped review this year's submissions!
1
4
530
We will announce the winners of the 2025 @volatility #PluginContest winners tomorrow, Friday, Mar 6, so stay tuned! #DFIR #memoryforensics #Volatility3
The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins! We will be highlighting each #Contender & the winners will be announced on Friday! #DFIR #memoryforensics
4
4
2,852
The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins! We will be highlighting each #Contender & the winners will be announced on Friday! #DFIR #memoryforensics
9
7
1
13
13,610
.@volatility #PluginContest #Contender Théo Letailleur: Journald Extractor automates extraction of Linux journal files cached in memory, along with analysis via the open-source go-journalctl tool to obtain parsed versions of these files from memory. #DFIR #memoryforensics
2
1
623
.@volatility #PluginContest #Contender Kyrre Wahl Kongsgård: Arrow & Parquet Renderers allows #Volatility3 plugin output to be written via the Arrow + Parquet renderers, enabling the output to be integrated into tools for modern data analysis workflows. #DFIR #memoryforensics
2
1
510