We have announced the winners of the 2025 #Volatility
#PluginContest! And the First Place is:
Daniel Baier for XFRM Inspector
Read the full Contest Results in our blog post:
volatilityfoundation.org/the-2025-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
✨DFRWS EU 2026 I Memory Forensics | Papers & Presentations Foundational research and methodological rigor in volatile forensics. 👉 Program: https://dfrws.org/eu-2026-program/#wednesday 🧿Register: https://dfrws.org/conferences/dfrws-eu-2026/#Registration
📜 DFRWS EU 2026 I Memory Forensics | Papers & Presentations
Foundational research and methodological rigor in volatile forensics:
👉 Program (Wed): buff.ly/prPkb7d
🧿 Register: buff.ly/O5gA8U6
#MemoryForensics #DigitalEvidence
#DFIR #VolatileMemory #ForensicResearch
✨ DFRWS EU 2026 Workshops Led by Erik Hjelmvik (Netresec, Sweden), the session is designed for practitioners and researchers working with network and memory forensics in real-world investigations. 📍 Workshop Dates 23–24 March 2026 🧿 Details here: https://buff.ly/oT8OtbE
✨ DFRWS EU 2026 Workshops
Led by Erik Hjelmvik (Netresec, Sweden), the session is designed for practitioners and researchers working with network and memory forensics in real-world investigations.
📍 Workshop Dates 23–24 March 2026
🧿 Details here: buff.ly/oT8OtbE
#MemoryForensics #PCAP #TOR
This year we received 8 submissions from 7 different countries that included 20 plugins. It's exciting to see how #memoryforensics researchers continue to innovate & contribute to #Volatility3.
Special thanks to the core developers & previous winners who helped review this year's submissions!
We are excited to announce the First Place winner of the 2025 #Volatility #PluginContest is:
Daniel Baier for XRFM Inspector
See the full Contest Results in our blog post: volatilityfoundation.org/the-2025-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
✨DFRWS EU 2026 Workshops 📍 Workshop Dates 23–24 March 2026 📍 Hybrid • Linköping, Sweden Explore workshop details 👉 https://buff.ly/Q45nyji Register 👉 https://buff.ly/lsQrqiZ
✨DFRWS EU 2026 Workshops
All DFRWS #Workshops and Social Events are inclusive in Registration. 👍
📍 Workshop Dates 23–24 March 2026
📍 Hybrid • Linköping, Sweden
Explore workshop details 👉 buff.ly/Q45nyji
Register 👉 buff.ly/lsQrqiZ
#NetworkTrafficAnalysis #MemoryForensics #DFIR #TorAnalysis
Memory Analysis for #Linux has always been a bit hit-or-miss. Trail of Bits has released a tool called #mquire that doesn't require debug symbols for the originating Kernel.
#MemoryForensics #IncidentResponse #DFIR #DigitalForensics
✨DFRWS EU 2026 I Memory Forensics | Papers & Presentations Foundational research and methodological rigor in volatile forensics. 👉 Program: https://dfrws.org/eu-2026-program/#wednesday 🧿Register: https://dfrws.org/conferences/dfrws-eu-2026/#Registration
📜 DFRWS EU 2026 I Memory Forensics | Papers & Presentations
Foundational research and methodological rigor in volatile forensics:
👉 Program (Wed): buff.ly/prPkb7d
🧿 Register: buff.ly/O5gA8U6
#MemoryForensics #DigitalEvidence
#DFIR #VolatileMemory #ForensicResearch
Volatility New Release: #volatility3 v2.27.0 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
And that’s it! The 2025 #Volatility #PluginContest is now closed. Stay tuned for winner announcements in the coming weeks! And good luck to all contenders!
#memoryforensics #opensource #dfir
The @volatilityfoundation.org #PluginContest closes on Dec 31, 2025! Make sure to submit your entry by the deadline! If you’re looking for inspiration, take a look at our roll call of past contest submissions: volatilityfoundation.org/volatility-p....
#memoryforensics
www.sunoltech.com/product/p060...
HPE Smart Memory 16GB DDR4 SDRAM Memory Module - For Server - 16 GB (1 x 16GB) - DDR4-3200/PC4-25600 - 3200 MHz Dual-rank Memory - CL22 - 1.20 V - Registered - 288-pin - DIMM @HP #memoryforensics #1gb #sdram #ddr4 #pc4 #3200mhz #dimm #288pin
The 13th annual @volatility #PluginContest is OPEN for submissions until 31 Dec 2025!
This contest is designed to encourage research & development in the field of #memoryanalysis. Every year, contributions from all around the world continue to help build the next generation of #memoryforensics.
🎃 Happy Halloween Week! It's time for a new 13Cubed episode. Let's look at a quick and easy way to find the Intermediate Symbol File (ISF) for your Linux memory image and speed up your analysis. www.youtube.com/watch?v=W40g... #DFIR #Linux #MemoryForensics
New Release: #volatility3 v2.26.2 - visit github.com/volatilityfo... for details and downloads.
#memoryforensics #dfir
Coming up the week of October 20th: #FTSCon + TWO in-person #training opportunities!
Learn more here: volatilityfoundation.org/from-the-sou...
#dfir #memoryforensics #hardwarehacking
Coming this October: #FTSCon 2025, hosted by @volatilityfoundation.org! And this year there are TWO in-person training opportunities!👇
#dfir #memoryforensics #volatility3 #hardwarehackingbasics #grandideastudio
The 13th annual @volatilityfoundation.org #PluginContest is now OPEN! This is a meaningful way to contribute to open source forensics & gain community-wide visibility for your work. And, as always, winners get cash prizes!
Submission Deadline: 31 December 2025
#dfir #memoryforensics
Volexity is going to Vegas! This image also includes the iconic "Welcome to Fabulous Las Vegas Nevada" sign.
@volexity.com researchers will be presenting at THREE conferences in Las Vegas this August! Here’s where you can hear about some of our latest research in #memoryforensics and automated malicious script detection and de-obfuscation:
[1/5]
This training course will be led by Andrew Case @attrc.bsky.social, Michael Ligh & Dave Lassalle. This is a great opportunity to gain valuable knowledge about #Volatility3 + learn all about #memoryforensics from Volatility core developers! Seats are filling up quickly so don't wait!
An image of Michael Hale Ligh, a Volatility core developer, leading a training session. There are students in the foreground focused on what is being discussed. In the background, out the window, is the Washington Monument. There is a top yellow banner that reads IN-PERSON TRAINING, and a blue text box on the bottom that reads "Malware & Memory Forensics Training, October 21-24, 2025 | Arlington VA"
The next in-person Malware & Memory Forensics Training will be in Arlington VA, October 21–24, 2025! This is the only #memoryforensics course taught directly by the Volatility developers. Course registration includes a pass to #FTSCon!
Course details: memoryanalysis.net/courses-malw...
📢 Workshop Announcement – DFRWS USA 2025
Join Andrew Case (Volexity) and Hala Ali (VCU) for:
"Modern Memory Forensics with Volatility 3."
Advance your skills in memory analysis with the latest Volatility framework.
📍 Chicago | 📅 July 22–25, 2025
#DFRWS2025 #MemoryForensics #Volatility3 #DFIR
As highlighted this week, the #PluginContest demonstrates that #memoryforensics researchers continue to innovate + contribute to #Volatility!
Special thanks to the core developers & previous winners who helped review submissions!
We are excited to announce that the @volatilityfoundation.org #PluginContest First Place winner is:
Valentin Obst for btf2json
Read the full Contest Results:
volatilityfoundation.org/the-2024-vol...
Congrats to all winners & thank you to all participants!
#DFIR #memoryforensics
The black Volatility 3 logo outlined with a red glow on an ombre background of black to red, and white text that reads "#PluginContest winners will be announced tomorrow, 28 March 2025!"
We will announce the @volatilityfoundation.org #PluginContest winners tomorrow, Friday, March 28, so stay tuned!
#DFIR #memoryforensics #Volatility3
@volatilityfoundation.org #PluginContest #Contender
Sylvain Peyrefitte: ScringsScan + VadScringsScan provide syntax-aware scanning for 6 languages in kernel memory in Linux, macOS & Windows + in-process VADs in Windows, improving in-memory script payloads searching.
#DFIR #memoryforensics
@volatilityfoundation.org #PluginContest #Contender
Valentin Obst: btf2json focuses on large-scale Linux memory analysis, incorporating information in the vmlinuz file to create #Volatility3 symbol tables without the need for a full debug kernel.
#DFIR #memoryforensics
@volatilityfoundation.org #PluginContest #Contender
Kartik N. Iyer + Parag H. Rughani: Thread Local Storage (TLS) Callback is a feature-rich plugin designed to detect, analyze & disassemble TLS callbacks in memory samples.
#DFIR #memoryforensics
@volatilityfoundation.org #PluginContest #Contender
Thomas Clarke: Image Extraction, NSRL Filtering & Image Classifiers plugins help investigators extract memory-resident images & sort those images using numerous classifiers.
#DFIR #memoryforensics
@volatilityfoundation.org #PluginContest #Contender
Shusei Tomonaga: ETW Scan is an investigative tool to aid security researchers, reverse engineers & incident responders in leveraging Windows Event Tracing for Windows (ETW) data for enhanced threat hunting & analysis.
#DFIR #memoryforensics
