Andrew Case

20.5K posts

Andrew Case banner
Andrew Case

Andrew Case

@attrc

@Volatility Core developer, Dir. of Research @Volexity, @lsucyber, The Art Of Memory Forensics Co-Author

New Orleans, LA Katılım Mart 2010
4.7K Takip Edilen27.4K Takipçiler
Sabitlenmiş Tweet
Andrew Case
Andrew Case@attrc·
With Volcano, security teams can automate the entire workflow of acquisition of memory and select files to deep analysis to automated alerts that directly point to signs of memory only malware and attacker activity throughout RAM and key artifacts sources from disk.
Volexity@Volexity

.@Volexity Volcano Server & Volcano One v25.09.21 adds memory analysis support for ARM64 Linux, macOS 26 (Tahoe) & Windows 25H2, as well as 75+ new YARA rules, 10+ new IOCs, analysis of udev rules, and rolling upgrades for managed endpoints. [1/2]

English
0
5
12
9.1K
Andrew Case retweetledi
Volexity
Volexity@Volexity·
The latest @DarknetDiaries (Ep. 174: Pacific Rim) offers a look at state-sponsored groups targeting perimeter infrastructure & edge devices. Thanks @JackRhysider for mentioning our work! @Volexity’s detection and response efforts combined network visibility, host-based analysis, #threatintelligence & #memoryforensics, enabling us to discover these complex #0days being exploited in the wild. Read our blog post for the original research mentioned: volexity.com/blog/2022/06/1…
Jack Rhysider 🏴‍☠️@JackRhysider

Ep 174 "Pacific Rim" is now live! 🔊 Sophos got attacked by a nation state actor. How they handled it is controversial. Curious what you would have done. darknetdiaries.com/episode/174/

English
0
8
14
2.1K
Andrew Case
Andrew Case@attrc·
Memory-only malware leaves no trace on the file system & is commonly used by threat actors ranging from criminal organizations to ransomware operators to APTs. In our @volatility 3 training, students gain deep hands on experience analyzing such threats: memoryanalysis.net/courses-malwar…
Andrew Case tweet media
English
0
35
142
10.9K
Andrew Case retweetledi
Brendan Dolan-Gavitt
Brendan Dolan-Gavitt@moyix·
I'm glad we can finally talk about this! :D As an inveterate blabbermouth it has been killing me to keep my blabbering mouth shut
XBOW@Xbow

For the past 2 months, XBOW has been testing Mythos Preview under embargo as part of a select early-access group. Today, we can finally share what we found. The headline: Mythos Preview is a major advance. It is substantially better than prior models at finding vulnerability candidates, especially when source code is available. But it’s not perfect. We surfaced issues with exploit validation, judgment, and efficiency. Our full write-up covers where Mythos Preview shines, where it still needs support, and what we think this means for the future of offensive security: bit.ly/42zQl98

English
5
13
141
31.9K
Andrew Case retweetledi
Andrew Case
Andrew Case@attrc·
With Volcano, security teams can automate the entire workflow of acquisition of memory and select files to deep analysis to automated alerts that directly point to signs of memory only malware and attacker activity throughout RAM and key artifacts sources from disk.
Volexity@Volexity

.@Volexity Volcano Server & Volcano One v25.09.21 adds memory analysis support for ARM64 Linux, macOS 26 (Tahoe) & Windows 25H2, as well as 75+ new YARA rules, 10+ new IOCs, analysis of udev rules, and rolling upgrades for managed endpoints. [1/2]

English
0
5
12
9.1K
Andrew Case retweetledi
BSides Memphis
BSides Memphis@BSidesMemphiss·
SAVE THE DATE!! BSides Memphis will be hosted at Epicenter Memphis on October 3rd, 2026! More info to come on tickets, CFP, Sponsors, ect. please share so the local community knows this is happening!
BSides Memphis tweet media
English
0
2
2
451
Andrew Case retweetledi
REcon
REcon@reconmtl·
We have started announcing Recon 2026 Presentations recon.cx/2026/en/speake… More talks to be announced soon once we have confirmations @frodosobon @realytcracker @allthingsida @hexnomad @0x464D @hunterbr72 @joegrand @clearbluejar @InvokeReversing @LennertWo @pinkflawd @Coiffeur0x90 @MathildeVenault @NicoleFishi19 @nicolodev @phLaul @SinSinology @i0n1c @mr_phrazer @tmanning @hex86_64 #REcon2026 #ReverseEngineering #InfoSec #cybersecurity
REcon tweet media
English
1
24
86
9.5K
Andrew Case
Andrew Case@attrc·
I am excited to announce that I will be speaking at @bsidesnash on May 15th. Be sure to attend to see all the latest @volatility 3 plugins against the most sophisticated and devastating malware from the wild!
English
1
8
17
2.6K
Andrew Case retweetledi
L0Psec
L0Psec@L0Psec·
Another interesting one shared by @malwrhunterteam: 1c715cd40331ba2ca6559d2fdb958e7f44053080f9ffd3d90bd1916978d336cb ( 1 VT hit for DPRK). This is a fun one and even has a usage prompt when executing, which is strange. 🧵 Let's dig in
L0Psec tweet media
English
2
12
50
8.7K

Keşfet

@DarknetDiaries @JackRhysider @Volexity @volatility @TheStalwart @daveaitel @dinodaizovi @halvarflake