Raphaela Mettig

The 14th annual #Volatility #PluginContest is officially OPEN! This is your chance to contribute to open source forensics, gain community-wide visibility for your work, and win a cash prize! See our blog post for details! Submission Deadline: 31 December 2026 #dfir #memoryforensics

My colleague and I will be speaking at BSidesNOLA on May 12th and talk about some of the big lessons we've picked up along the way as we pivoted from IT cybersecurity into the OT side of things. If you're around, come watch! Talk info: bsidesnola.notion.site/Talks-31e249...

The ACM Digital Library is now fully open access: www.acm.org/about-acm/ac...

Just want to take a moment and give the @wiresharkfoundation.org a shout-out for having AWESOME documentation. I absolutely love it when official docs include clear and concise explanations, including "hey here's this common issue, why it happens, and a few ways to work around it."

It's #OBTSv8 week! www.youtube.com/watch?v=lWLV...

Coming up the week of October 20th: #FTSCon + TWO in-person #training opportunities! Learn more here: volatilityfoundation.org/from-the-sou... #dfir #memoryforensics #hardwarehacking

Memory Integrity Enforcement: A complete vision for memory safety in Apple devices security.apple.com/blog/memory-...

I saw an internet post where someone was marvelling at how expensive accessing a journal article was, and how they at least hoped that the authors were being paid well by the journal for their hard work, and oh no I have some terrible news

Cybersecurity professionals and researchers can now launch Kali Linux in a virtualized container on macOS Sequoia using Apple's new containerization framework.

BSidesNYC thanks @gleeda.bsky.social and the rest of the 0x05 Technical CFP Committee, @cyb3rkitties.bsky.social, Cesar Vargas, Jase English, Jamie Williams, Jessica Hyde, @rmettig.com, and Stephanie Aceves for volunteering their time to review talks. Many thanks for curating our programming.

The House Homeland Security cyber subcommittee is holding a hearing this morning on the changing threats to operational technology, tied to the 15-year anniversary of the Stuxnet worm: homeland.house.gov/hearing/full...

I'll be testifying tomorrow at 10am before the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection about Stuxnet and critical infrastructure security. Also on panel will be Rob Lee (Dragos), Tatyana Bolton, and Nate Gleason

The Call For Speakers for #FTSCon closes tomorrow! Make sure to submit your talks before the deadline! This is a great opportunity to share your DFIR open source tools and investigation tales with leading experts in the field.

REMINDER: The Call for Speakers for #FTSCon is open! The deadline is July 23. See the full details in our blog post: volatilityfoundation.org/announcing-f... #dfir #FTSCon

If you want to share tech ideas, please don't write them on medium. I get so sad every time I see folks linking there, and then I realise I have to pander to a paywall.

BSidesNYC is on October 18, 2025. The CFP is still open. Submit a topic today! bsidesnyc.org/cfp/

What do you mean it's already July 😭

#LSU cyber students will teach new ways to fight malware at the world’s largest and longest-running hacking conference @defcon.bsky.social www.lsu.edu/blog/2025/06... #ScholarshipFirst #WBTTW @lsu.bsky.social @lsuengineering.bsky.social @attrc.bsky.social @volexity.com @volatilityfoundation.org

📣 New OT Blog The Mandiant OT team wrote about how attackers might target microprocessor relays that protect electric grids and their components. This blog is intended to help relay and substation automation engineers harden and defend their systems. #OTSecurity cloud.google.com/blog/topics/...

The BSidesNYC call for papers is still open. Submit your topic today! bsidesnyc.org

Undisputedly the best training on memory forensics. Highly technical, information-dense, and in depth. If you're a malware analyst, reverse engineer, DFIR professional, or just another sys internals nerd, I cannot recommend it enough.

The Call for Presentations for From the Source 2025 is open! Our Makers Track is aimed at developers of open source DFIR tools and the Hunters track covers the best Threat Intel research of the past year. 

 See the full details in our blog post: volatilityfoundation.org/announcing-f...

We are excited to announce FTSCon 2025 on October 20, 2025, in Arlington VA! Registration is now OPEN + we have a Call for Speakers. Following FTSCon will be a 4-day Malware & Memory Forensics Training course with Volatility 3. See the full details here: volatilityfoundation.org/announcing-f...

I will be showing off Volatility 3 during my talk on Wednesday afternoon at RVASec. Be sure to attend and come say hello if you will be around! rvasec.com/rvasec-14-sp...

For those who missed it, Volatility 3 is officially out! #DFIR

Stank face: on. 🔥🔥🔥 www.youtube.com/watch?v=IXif...

Jessica Hyde shares updates on Hexordia, DFIR training, CTFs, and the importance of community collaboration in digital forensics. #digitalforensics

Happy New Spiritbox Album Day 🔥🔥🔥 www.youtube.com/watch?v=o_l4...

Check out the new Humble Book Bundle from @nostarchpress.bsky.social: Computer Science the Fun Way. Pay what you want for up to 18 titles and benefit EFF at the same time!

The 2005 DFRWS Windows memory forensics challenge spawned a generation of DFIR researchers, and the 2008 Linux challenge is what led me to @volatilityfoundation.org. The 25th anniversary event will be held in Chicago this summer and promises to be an incredible time: dfrws.org/dfrws-jubile...

Remember when you used to be able to buy video games on a piece of physical media, put it into the console, and just PLAY the game without having to download/install/update anything else? Good times...

Someone asked me what my thoughts were on Onyx Storm, and my response was "what APT is that again?" 🙃

Anyone who thinks the NYC subways are scary does not ride the NYC subways. Or perhaps hasn't since the 1980s (and even then it wasn't as bad as people claimed).

A good general epistemic rule of thumb: If you have spent a few hours or weeks studying an area large numbers of smart, educated people have worked in for decades, and you believe you have discoverer an earthshattering truth they all missed, your default should be to regard this as VERY unlikely.

you fucked up a perfectly good computer is what you did. look at it. it's got innumeracy

I gotta say Duolingo Music has the most intense version of Hot Cross Buns I've ever heard

We’re hiring a technical writer for my team here at @huntress.com in case anyone is interested! Feel free to reach out with questions 😃 #cti #dfir job-boards.greenhouse.io/huntress/job...

Added several more folks to the ICS/OT starter pack. Won't be long before we reach 150! Who else should I add? go.bsky.app/SQygf7K

RIP to all the VMware documentation that got migrated over to to the Broadcom docs and are nothing but broken links now

As seen in this guidance from NCSC published today, memory forensics continues to play a critical role in modern digital investigations! After almost 20 years, it's encouraging to still see the need for the amazing work by the #Volatility contributors!

Xcode can't make anything easy, can it 😵‍💫

I'll take weather like this any day over three digit temps, I'm honestly over those

Louisiana is closed and I still need to work but it's a SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY SNOW DAY WOOOOOOOOO

@volatilityfoundation.org New Release: #volatility3 v2.11.0 - visit github.com/volatilityfo... for details and downloads. #memoryforensics #dfir

I would like this comic I drew in 2017 to stop being relevant pleeeaaaaase

The deadline for paper submissions to the 25th Annual DFRWS USA is quickly approaching - January 20th for abstracts and 27th for full papers - submit ASAP! dfrws.org/conferences/... #DFIR #infosec