JL's stuff

In case you missed it, I put up my slides for my OMFW 2013 talk "Every Step You Take: Profiling the System".  You can find them he...

Things have been busy lately, but I want to let you know about some important items that are coming up quickly: July 27-30th, 2013: Black...

I have several speaking and training events that are coming up this year that may be of interest to others in the community: I will be spe...

Cross posted from the Volatility Labs Blog :  The next journey to the center of Windows Memory Forensics starts in Chicago this March!  ...

Cross posted from the Volatility Labs Blog: We are pleased to announce the 1st Annual Volatility Plugin Contest. This contest is inspired...

We are pleased to announce the first public offering of the Windows Memory Forensics for Analysts training course. This is the only memory f...

I will be teaching a full day course on Windows Forensics and IR at Annual Computer Security Applications Conference (ACSAC) on December 4t...

Cross listed from Andrew Case's blog : I was writing to announce that week 3 of the month of Volatility plugins is finished, and we ...

It's been an exciting week in the Volatility community.  We've just finished our second week of Month of Volatility Plugins (MoVP) ...

 I'm going to borrow from Andrew's blog here to let you know about our Month of Volatility Plugins: I was writing to announce th...

While writing material for the Blackhat training course that Andrew Case and I gave this summer, I realized that there did not appear to b...

With the increase in MBR infectors , I've decided to release a script I wrote that parses the MBR as well as hashes and disassembles the...

Yet another interesting upcoming talk at John Jay College on Tuesday March 27, 2012: Center for Cybercrime Studies John Jay College of Crim...

I know I haven't written much in the last few months; I've been busy. Even though I'm writing a blogpost today it's still g...

I just wanted to take the time to announce the following upcoming talk at John Jay College next week: The Center for Cybercrime Studies John...

Back in July I gave a talk at OMFW about extracting timeline data from a memory sample using the Volatility framework. Now has come the t...

In case you missed it, Volatility 2.0 has been released ! Please download it and test it out and let us know if you have any problems via t...

From a computer forensics standpoint, userassist keys can provide a lot of information about user activity (see the Harlan's posts for ...

So if you come to this blog, you've most likely heard of Volatility . You're probably also a user... maybe you've written some ...

Since my QC (venus) website is no longer active, I thought I'd put the files for a maze generator some place where they can be accessed...