Results from the 2018 Volatility Contests
Results from the 2018 Volatility Contests have been published. We congratulate Aliz Hammond and Team Decepticon with the fir…
Memtriage v0.2-alpha Released
0.2-alpha version of memtriage has been released. This tool allows you to quickly query a Windows machine for RAM artifacts.…
Memory forensics and the Windows Subsystem for Linux
The Windows Subsystem for Linux (WSL) was first included in the Anniversary Update of Microsoft’s Windows 10 operating…
Join our Telegram DFIR group!
Guys, we have created a Telegram group, where we will do our best to answer all your questions. We will be very happy if you…
Smartphone Acquisition: Adapt, Adjust and Get Smarter!
Heather Mahalik has posted about a list of recommendations on iOS and Android-based smartphones forensic acquisition. If you…
2018 Volatility Analysis Contest
Volatility Foundation has announced another contest – Volatility Analysis Contest. All you need is to choose a sophist…
2018 Volatility Plugin Contest
Volatility Foundation has announced this year’s Plugin Contest. All you need is to create an innovative and useful ext…
Memory Forensics & Tor
Matt from bit_of_hex has published an interesting post about finding traces of Tor Browser usage in memory images with Volat…
Volatility Profiles and Windows 10
As of the recording of this video, the current version of Volatility is 2.6; however, even if you have this version installe…
How to Remotely Dump Linux RAM
Here is a guide on how to remotely dump Linux RAM with LiMEaide – a python application designed to remotely dump RAM o…
