At a recent Volexity Cyber Security Session, Steven Adair gave a presentation on how OceanLotus lures and targets its victims, including malware, fake news websites and organizations, and fake social media campaigns. If you want to see what real nation-state level targeting looks like then check out his talk:
https://www.volexity.com/company/resources/digital-surveillance-and-cyberes…
Windows 10 brought about significant changes in how file system and memory analysis must be performed.
I explore all of these changes in a recorded talk at the last Volexity CyberSecurity Session:
https://www.volexity.com/company/resources/windows-10-dfir-challenges-andre…
There is no signup required to watch or any other marketing nonsense, just the video and the accompanying slides.
Feedback and questions are welcome, and I hope you enjoy!
We at Volexity are looking for a Malware Reverse Engineer to join our team. The ideal candidate will have several years of experience in analyzing real-world malware and attacker toolsets as well as be familiar with the wider threat-intel and DFIR landscapes.
The job description can be found on our website:
https://www.volexity.com/company/careers/malware-reverse-engineer/
Volexity was founded by leading experts in the threat intelligence realm as well as several of the core Volatility developers. This includes Michael Ligh and myself. Our work centers on providing products, services, and training related to memory analysis, incident response, and threat intel. Our main client focus is highly targeted organizations across private industry, government, and NGOs.
Highlights of several of our efforts are on our blog, such as the recent Exchange vulnerability:
https://www.volexity.com/blog/2020/03/06/microsoft-exchange-control-panel-e…
Digital targeting of China's minority Uyghur population:
https://www.volexity.com/blog/2019/09/02/digital-crackdown-large-scale-surv…
And attack campaigns related to the 2016 United States election:
https://www.volexity.com/blog/2016/11/09/powerduke-post-election-spear-phis…
If this type of work interests you, then please submit your information on the career page linked above. Please do NOT reply to this email with your resume/application.
We wanted to remind everyone that we are now about two months away from our first public west coast training in several years. This is the timeframe where we start to get many requests so if you want a guaranteed spot then please reach out to us ASAP.
We will be in San Diego the week of March 9th for five days of Malware and Memory Forensics training led by the Volatility Team.
Full information can be found here:
https://volatility-labs.blogspot.com/2019/10/volatility-malware-and-memory-…
If you can’t join us in San Diego then we will also be hosting 3 other public trainings this year:
- April 20-24, Herndon, VA
- September 21-25, Amsterdam, NL
- October 12-16, Herndon, VA
And if you missed some of our last emails, we recently announced the Volatility 3 Public Beta:
https://volatility-labs.blogspot.com/2019/10/announcing-volatility-3-public…
As well as the results of the 2019 Volatility Plugin and Analysis Contests:
https://volatility-labs.blogspot.com/2019/11/results-from-2019-volatility-c…
Please reach out to us if you have any questions, and we look forward to meeting many new students and Volatility users this year!
Two weeks ago, at OSDFCon, we presented the first beta release of Volatility 3, and we are now happy to announce this release officially!
Volatility 3 is a complete rewrite of the framework and enables many new types of analysis.
The first full release is slated for next summer, and we are hoping to inspire many community members to join us in developing, testing, and documenting the framework from now until then.
Full details of the beta release, as well as ongoing and future work, can be found on our blog post:
https://volatility-labs.blogspot.com/2019/10/announcing-volatility-3-public…
Please let us know if you have any questions or comments. You can send those here or on our new Slack server: https://www.volatilityfoundation.org/slack
— The Volatility Team
We are very excited to announce our public training lineup for 2020!
For the first time since 2016, we will be headed to the west coast - San Diego in March!
We will also be running courses in Herndon in April and October and in Europe in September.
Full information on the course, including locations, dates, and how to register can be found on our blog post:
https://volatility-labs.blogspot.com/2019/10/volatility-malware-and-memory-…
We looking forward to meeting many new students this year!
— The Volatility Team
Volatility Contributors,
Many of you may have noticed that in a couple of weeks we will be giving a
talk at OSDFCon titled “Volatility 3 Public Beta: The Insider’s Preview”.
This presentation will be the first public introduction and pre-release of
Volatility 3. A major motivation for this talk was to inspire and engage
those members of the community who want to help us get Volatility 3 ready
for its official launch!
Getting to this initial milestone, while supporting users of the current
stable version, has only been possible because of our amazing community!
We are grateful for the contributions and for your patience over the last
couple of years. As a show of appreciation, Volexity is hosting a special
event on the evening of October 15th for the contributors of the
Volatility Project. If you have contributed to the project at some point
over the last 12 years and are attending OSDFCon or happen to be in the
Northern Virginia area on the evening of October 15, please send me a note
off list. Our goal is to get an initial head count by Tuesday, October
1st.
We look forward to hearing from you!
AAron Walters
The Volatility Foundation
We are very excited to announce the speaker lineup for BSidesNOLA 2019!
This year we will have 15 speakers across 3 tracks.
The topics covered span digital forensics, malware analysis, threat hunting, penetration testing, and more.
Full information on each talk and presenter can be found at:
www.bsidesnola.com
You will also find registration, venue, and sponsorship information there as well.
Please register early, if possible, as it greatly helps us in the planning of the event.
We will be announcing the keynote speaker next week so be sure to look for that!
We hope to see you all on October 26th!
If you are going to be in the Reston, VA area on Sept 25th, then you should consider coming out to our meet up.
I will be presenting my recent talk from BSides Las Vegas, “Windows 10 DFIR Challenges”, and Steven Adair will be giving his RSA talk on “Digital Surveillance and Cyberespionage at Scale”.
Not to mention, many of the Volatility developers will also be hanging out.
It would be great to catch up.
Full information can be found here:
https://www.meetup.com/Volexity-Cyber-Sessions/events/264350470/
Thanks,
Andrew
We are very happy to announce that Security BSidesNOLA 2019 will take place on Saturday, October 26th!
This will be our 7th year, and we are hoping to again break our attendance record.
We have switched venues to a beautiful hotel inside the French Quarter that we believe will allow for our best event yet.
Registration and the CFP are both now open.
Full details can be found at http://www.bsidesnola.org.
We are also actively looking for sponsors. If you or your company are interested, then please email bsidesnola(a)gmail.com for a sponsorship packet.
We are looking forward to seeing you all in October!
— The BSidesNOLA Team
