volatility

Official account of the Volatility Memory Analysis Project and Windows Malware and Memory Forensics Training.

[volatility @volatility]

The 14th annual @volatility #PluginContest is officially OPEN! This is your chance to contribute to open source forensics, gain community-wide visibility for your work, and win a cash prize!
https://t.co/kZ2GoAwziB

Submission Deadline: 31 December 2026

#dfir #memoryforensics

[Volexity @Volexity]

Heading to @BSidesAugusta this Saturday, October 24? Catch @Volexity's Director of Research, Andrew Case (@attrc), at 10:00 AM (Track 1 - Plug N Play) for his talk, “Finding Evil Fast: Windows Memory Triage with Volatility 3”.

See the full conference schedule here: https://t.co/oykJZyPHAL

#memoryforensics #dfir #volatility

[Andrew Case @attrc]

I will be speaking at @BSidesAugusta this weekend on rapid triage of Windows systems with @volatility 3! Please come say hello if you will be around.

[Andrew Case @attrc]

"Security Through Obscurity Is Dead and LLMs Killed It."

@moyix's @UnpromptedAU talk: a cat pic you can’t photocopy and an emulated HP printer that "runs out" of toner. Send this to your friends and coworkers who think their secrets are safe inside a compiled binary:

https://t.co/oWoaVLfEHe

[volatility @volatility]

Submissions are coming in for the 14th annual #Volatility #PluginContest! This is your chance to contribute to open source forensics, gain community-wide visibility for your work + win a cash prize!

See the contest details here: https://t.co/kZ2GoAwziB

#dfir #memoryforensics

[Volexity @Volexity]

Join @attrc, Volexity’s Director of Research, at @BSidesNYC on Saturday, October 17 at 10:00 AM ET (Blue Track). In “Finding Evil Fast: Windows Memory Triage with Volatility 3,” he will share five automated checks for quickly finding malicious activity in Windows memory.

See the full conference schedule here: https://t.co/ywfIkdGNnr

#memoryforensics #dfir #volatility

[volatility @volatility]

.@volatility New Release: #volatility3 v2.28.2 - visit https://t.co/KhWIzDVSEG for details and downloads.

#memoryforensics #dfir

[Andrew Case @attrc]

Memory-only malware leaves no trace on the file system and is commonly used by threat actors ranging from criminal organizations to ransomware operators to APT groups. To detect such malware, memory forensics must be performed to deeply examine the state of a potential victim system. If your organization isn't performing memory forensics then you are missing the malware that actually matters!

[volatility @volatility]

The 14th annual @volatility #PluginContest is officially OPEN! This is your chance to contribute to open source forensics, gain community-wide visibility for your work, and win a cash prize!
https://t.co/kZ2GoAwziB

Submission Deadline: 31 December 2026

#dfir #memoryforensics

[Jamie Levy🦉 @gleeda]

Currently watching @attrc from @Volexity do his @BlackHatEvents arsenal talk on new @volatility memory forensics capabilities that were just released!

#blackhat2026

[Andrew Case @attrc]

I am very excited to announce that my @volatility 3 workshop with David McDonald and Pierre Breton was accepted for @defcon this summer!!

[volatility @volatility]

.@volatility New Release: #volatility3 v2.28.0 - visit https://t.co/KhWIzDVSEG for details and downloads.

#memoryforensics #dfir

[Andrew Case @attrc]

I am excited to announce that I will be speaking at @bsidesnash on May 15th. Be sure to attend to see all the latest @volatility 3 plugins against the most sophisticated and devastating malware from the wild!

[Andrew Case @attrc]

Memory-only malware leaves no trace on the file system & is commonly used by threat actors ranging from criminal organizations to ransomware operators to APTs. In our @volatility 3 training, students gain deep hands on experience analyzing such threats:

https://t.co/kihCRhwaov

[volatility @volatility]

We have announced the winners of the 2025 @volatility
#PluginContest! And the First Place is:

Daniel Baier for XFRM Inspector

Read the full Contest Results in our blog post:
https://t.co/D5lwMbOJV0

Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics

[volatility @volatility]

The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins!

We will be highlighting each #Contender & the winners will be announced on Friday!

#DFIR #memoryforensics

[volatility @volatility]

The annual @volatility #PluginContest continues to highlight how #memoryforensics researchers are innovating + contributing to #Volatility3!

Special thanks to the core developers & previous winners who helped review this year's submissions!

[volatility @volatility]

We are excited to announce the 2025 @volatility #PluginContest First Place winner is:

Daniel Baier for XRFM Inspector

See the full Contest Results: https://t.co/D5lwMbOJV0

Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics

[volatility @volatility]

The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins!

We will be highlighting each #Contender & the winners will be announced on Friday!

#DFIR #memoryforensics

[volatility @volatility]

We will announce the winners of the 2025 @volatility #PluginContest winners tomorrow, Friday, Mar 6, so stay tuned!

#DFIR #memoryforensics #Volatility3

[volatility @volatility]

The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins!

We will be highlighting each #Contender & the winners will be announced on Friday!

#DFIR #memoryforensics

[volatility @volatility]

.@volatility #PluginContest #Contender
Théo Letailleur: Journald Extractor automates extraction of Linux journal files cached in memory, along with analysis via the open-source go-journalctl tool to obtain parsed versions of these files from memory.
#DFIR #memoryforensics

[volatility @volatility]

The 2025 @volatility #PluginContest review is complete! We received 8 submissions from 7 different countries that included 20 plugins!

We will be highlighting each #Contender & the winners will be announced on Friday!

#DFIR #memoryforensics

[volatility @volatility]

.@volatility #PluginContest #Contender
Kyrre Wahl Kongsgård: Arrow & Parquet Renderers allows #Volatility3 plugin output to be written via the Arrow + Parquet renderers, enabling the output to be integrated into tools for modern data analysis workflows.
#DFIR #memoryforensics