Collaborate Disseminate
As mentioned in a recent blog post, our team is once again offering in-person training, and we have substantially updated our course for this occasion. Our next offering will be in Amsterdam in October 2023. To showcase our team’s new research, we are … Continue reading Memory Forensics R&D Illustrated: Recovering Raw Sockets on Windows 10+
We are excited to announce that the 11th Annual Volatility Plugin Contest is now open! This is your chance to gain industry-wide visibility for your work, contribute to an important open-source project, and win a cash prize!Volatility Plugin ContestThe… Continue reading The 11th Annual Volatility Plugin Contest!
We are very excited to announce the next public offering of our Malware and Memory Forensics with Volatility training course! This fall, our course will be held in Amsterdam on Monday, October 2, through Friday, October 6. Course content was recently u… Continue reading Malware and Memory Forensics Training Headed to Amsterdam in October 2023!
As mentioned in a recent blog post, our team is once again offering in-person training, and we have substantially updated our course for this occasion. Over the next several weeks, we will be publishing a series of blog posts, offering a sneak peek at … Continue reading Memory Forensics R&D Illustrated: Detecting Hidden Windows Services
We are excited to announce that we are resuming our in-person Malware and Memory Forensics with Volatility training course! From Fall 2012 until Spring 2020, this course ran multiple times a year and taught hundreds of students how to apply memory fore… Continue reading The Return of In-Person Volatility Malware and Memory Forensics Training!
Over the last few months, we have received many questions about when our Malware and Memory Forensics training would return to in-person learning. Given that a new year is nearly here, and the rate of inquiries has continued to increase, we wanted to d… Continue reading Malware and Memory Forensics Training in 2022!
In this blog post, we are going to walk you through the research and development process that leads to new and powerful memory analysis capabilities. We are often asked about what this workflow looks like, and how the abuse of an API by malware or a ne… Continue reading Memory Forensics R&D Illustrated: Detecting Mimikatz’s Skeleton Key Attack
Nearly 2 years ago, we published a blog post about our collaboration with Dr. Golden G. Richard III at the Louisiana State University (LSU) Center for Computation and Technology (CCT). We are very happy to report that this collaboration is still going … Continue reading Highlighting Research from the Next Generation of Memory Forensics Practitioners
We are very excited to announce that our popular Malware and Memory Forensics with Volatility training is now available in a self-paced, online format!Brought to you by members of the Volatility Team, this course gives you the opportunity to learn dire… Continue reading Malware and Memory Forensics Training Goes Virtual!
While analyzing real-world systems, memory analysts will often encounter anti-virus (AV) engines, EDRs, and similar products that, at first glance, look suspiciously like malware. This occurs because these security products leverage the same techniques… Continue reading When Anti-Virus Engines Look Like Kernel Rootkits