Aaron Sparling @OSINTlabworks

BJJ Blackbelt, Memory 4N6 nerd, malwareRE noob, poorly rated chess player. Joined May 2014

Tweets

2K
Followers

1K
Following

901
Likes

5K

John Hammond @_JohnHammond

2 weeks ago

the recording of my talk on the Black Hat show floor is up on yout00b :) youtu.be/whhOYRWd_rs

4 38 233 42K 106

Download Image

Invoke RE @InvokeReversing

3 weeks ago

For those who missed it, our founder Joshua Reynolds featured the Binja Lattice MCP server on Prompt||GTFO here: youtube.com/watch?v=tNd_j0… where he highlighted reverse engineering malware with AI!

0 9 21 3K 8

Download Image

Just posted my @defcon slides (talk #2): "Binary Facades" Mac malware may be compiled Mach-Os but can contain embedded scripts. Learn to spot these 'faux' binaries + the techniques to extract their scripts ...skipping the disassembler entirely! 🍎🐛 speakerdeck.com/patrickwardle/…

1 35 127 9K 52

SANS DFIR @sansforensics

a month ago

Now at #DFIRSummit: Aaron Sparling @OSINTlabworks @Walmarttech walks through forensic techniques for analyzing #TAILs—an OS built for anonymity. From RAM imaging to artifact recovery, this session tackles how to investigate what’s designed to disappear. #MemoryForensics #DFIR

0 2 2 1K 1

Download Image

volatility @volatility

3 months ago

We are excited to announce FTSCon 2025 on October 20, 2025, in Arlington VA! Registration is now OPEN + we have a Call for Speakers. Following FTSCon will be a 4-day Malware & Memory Forensics Training course with Volatility 3. See the full details here: volatilityfoundation.org/announcing-fts…

0 11 14 10K 3

volatility @volatility

4 months ago

We are very excited to announce that Volatility 3 has reached parity with Volatility 2! With this achievement, Volatility 2 is now deprecated. See the full details in our blog post: volatilityfoundation.org/announcing-the…

3 157 357 53K 51

Andrew Case @attrc

4 months ago

We are VERY excited to announce that Volatility 3 has now reached feature parity with Volatility 2! With this parity release, Volatility 2 is now deprecated. Full details in the blog post linked below.

volatility @volatility

4 months ago

3 157 357 53K 51

3 27 76 12K 4

Vector 35 @vector35

4 months ago

You asked, we delivered: Binary Ninja 5.0 brings major iOS reversing upgrades! DYLD Shared Cache is now a first-class feature, with up to 18x faster performance and way smarter analysis across the board. binary.ninja/2025/04/23/5.0…

1 13 49 4K 13

Cellebrite @Cellebrite

5 months ago

.@HeatherMahalik is back with another #TipTuesday - answering a topic that came up during our #C2CUserSummit. Understanding how to properly keyword search in your tool is a required skill. Today she clarifies questions you may have when searching for multiple words.

4 3 7 6K 2

Download Video

Andrew Case @attrc

6 months ago

I will be speaking on @volatility 3 next Saturday at @BsidesSD! Let me know if you will be around.

Andrew Case @attrc

6 months ago

I will be speaking on @volatility 3 next Saturday at @BsidesSD! Let me know if you will be around.

0 3 7 4K 1

0 5 14 2K 1

Cyber Triage @cybertriage

7 months ago

Are you ready? @carrier4n6 teaches endpoint triage tomorrow! Triage investigations tell you: → What happened on your system → What to prioritize during the investigation Don’t be a square. (Or, do be?) Either way, here’s how to register: attendee.gotowebinar.com/register/14271…

1 5 10 756 0

Download Image

volatility @volatility

8 months ago

.@volatility New Release: #volatility3 v2.11.0 - visit github.com/volatilityfoun… for details and downloads. #memoryforensics #dfir

1 47 135 11K 35

Download Image

Volexity @Volexity

10 months ago

.@Volexity’s latest blog post describes in detail how a Russian APT used a new attack technique, the “Nearest Neighbor Attack”, to leverage Wi-Fi networks in close proximity to the intended target, while the attacker was halfway around the world. volexity.com/blog/2024/11/2… #dfir

7 178 387 93K 153

Anuj Soni @asoni

11 months ago

🚨 @UHC is hiring a Senior Malware Analyst! 🚨 If analyzing malware is your mission, apply now: careers.unitedhealthgroup.com/job/20783386/s… This is a remote role, but candidates must be located in the U.S. Not for you? Please retweet – this might be the opportunity one of your followers has been…

0 5 5 1K 1

Download Image

DFRWS @DFRWS

11 months ago

The 25th Annual DFRWS USA Conference will take place from July 22nd-25th 2025 in Chicago! The Call for Papers is now open and accepting submissions through January 27th. Please help us spread the word, and we are looking forward to many great submissions! dfrws.org/conferences/df…

0 7 6 2K 2

Andrew Case @attrc

11 months ago

The first public Malware and Memory Forensics training based exclusively on @volatility 3 will run from Oct 22nd to 25th in Arlington, VA. The class is filling up quickly as we near the registration deadline. Email us ASAP to attend! volatilityfoundation.org/in-person-malw… #DFIR #infsoec

1 20 53 5K 14

Volexity @Volexity

12 months ago

There are several opportunities coming up to hear some outstanding talks given by members of @Volexity’s R&D and #threatintel teams! We’ve compiled a list of who and where: 1/8

1 14 21 3K 7

Download Image

Volexity @Volexity

12 months ago

.@Volexity Volcano Server & Volcano One v24.09.12 adds 320 new YARA rules, IOCs for reverse shells on Linux, support for non-English unicode, and browser history from RAM [1/4] #dfir #memoryforensics #memoryanalysis

1 4 8 1K 2

Download Image

Andrew Case @attrc

a year ago

We have an incredible lineup of speakers confirmed for our From the Source event plus the entire Spy Museum in DC booked out for our networking event at night. You don't want to miss it! volatilityfoundation.org/from-the-sourc…

0 19 31 18K 3

volatility @volatility

a year ago

For the first time, we are hosting an in-person, public offering of our Malware & Memory Forensics Training focused solely on #Volatility3! When & Where: October 22–25, 2024 Arlington, VA Read more in our latest blog post: volatilityfoundation.org/in-person-malw… #dfir #memoryforensics