Andrew Case

20.5K posts

Andrew Case banner
Andrew Case

Andrew Case

@attrc

@Volatility Core developer, Dir. of Research @Volexity, @lsucyber, The Art Of Memory Forensics Co-Author

New Orleans, LA Katılım Mart 2010
4.7K Takip Edilen27.4K Takipçiler
Sabitlenmiş Tweet
Andrew Case
Andrew Case@attrc·
With Volcano, security teams can automate the entire workflow of acquisition of memory and select files to deep analysis to automated alerts that directly point to signs of memory only malware and attacker activity throughout RAM and key artifacts sources from disk.
Volexity@Volexity

.@Volexity Volcano Server & Volcano One v25.09.21 adds memory analysis support for ARM64 Linux, macOS 26 (Tahoe) & Windows 25H2, as well as 75+ new YARA rules, 10+ new IOCs, analysis of udev rules, and rolling upgrades for managed endpoints. [1/2]

English
0
5
12
9.1K
Andrew Case retweetledi
Volexity
Volexity@Volexity·
The latest @DarknetDiaries (Ep. 174: Pacific Rim) offers a look at state-sponsored groups targeting perimeter infrastructure & edge devices. Thanks @JackRhysider for mentioning our work! @Volexity’s detection and response efforts combined network visibility, host-based analysis, #threatintelligence & #memoryforensics, enabling us to discover these complex #0days being exploited in the wild. Read our blog post for the original research mentioned: volexity.com/blog/2022/06/1…
Jack Rhysider 🏴‍☠️@JackRhysider

Ep 174 "Pacific Rim" is now live! 🔊 Sophos got attacked by a nation state actor. How they handled it is controversial. Curious what you would have done. darknetdiaries.com/episode/174/

English
0
8
14
2.1K
Andrew Case
Andrew Case@attrc·
Memory-only malware leaves no trace on the file system & is commonly used by threat actors ranging from criminal organizations to ransomware operators to APTs. In our @volatility 3 training, students gain deep hands on experience analyzing such threats: memoryanalysis.net/courses-malwar…
Andrew Case tweet media
English
0
35
142
10.9K
Andrew Case retweetledi
Andrew Case retweetledi
Andrew Case
Andrew Case@attrc·
With Volcano, security teams can automate the entire workflow of acquisition of memory and select files to deep analysis to automated alerts that directly point to signs of memory only malware and attacker activity throughout RAM and key artifacts sources from disk.
Volexity@Volexity

.@Volexity Volcano Server & Volcano One v25.09.21 adds memory analysis support for ARM64 Linux, macOS 26 (Tahoe) & Windows 25H2, as well as 75+ new YARA rules, 10+ new IOCs, analysis of udev rules, and rolling upgrades for managed endpoints. [1/2]

English
0
5
12
9.1K
Andrew Case retweetledi
BSides Memphis
BSides Memphis@BSidesMemphiss·
SAVE THE DATE!! BSides Memphis will be hosted at Epicenter Memphis on October 3rd, 2026! More info to come on tickets, CFP, Sponsors, ect. please share so the local community knows this is happening!
BSides Memphis tweet media
English
0
2
2
451
Andrew Case retweetledi
Andrew Case
Andrew Case@attrc·
I am excited to announce that I will be speaking at @bsidesnash on May 15th. Be sure to attend to see all the latest @volatility 3 plugins against the most sophisticated and devastating malware from the wild!
English
1
8
17
2.6K
Andrew Case retweetledi
L0Psec
L0Psec@L0Psec·
Another interesting one shared by @malwrhunterteam: 1c715cd40331ba2ca6559d2fdb958e7f44053080f9ffd3d90bd1916978d336cb ( 1 VT hit for DPRK). This is a fun one and even has a usage prompt when executing, which is strange. 🧵 Let's dig in
L0Psec tweet media
English
2
12
50
8.7K