Twitxy Saved

Andrew Case

Verified account This account is verified. Learn more

@attrc

@Volatility | @Volexity | @lsucyber | The Art Of Memory Forensics | DFIR and AI
New Orleans, LA volexity.com Joined March 2010
6.1K Following 30K Followers 21K Posts

Latest posts 5

Pinned post

Andrew Case Verified account @attrc
Volcano now speaks MCP. One prompt to hunt for rootkits, memory-only malware, and active exploitation across every Windows, Linux, and macOS system in your enterprise.
Volexity Verified account @Volexity Oct 16
.@Volexity has published the third and final installment of its Mind the (Patch) Gap series. Parts 1 and 2 detailed Volexity’s discovery of multiple Chinese threat actors chaining zero-day exploits in Google Chrome and Microsoft Windows to deploy malware. This post takes a closer look at Volexity Volcano, one of the most advanced tools behind those findings.

The blog post also showcases Volcano’s new MCP server for AI-assisted incident response, threat hunting, and digital forensics. Volexity analysts used it to triage a compromised system, automatically annotate related artifacts, create new IOCs for future detection, and schedule targeted collections across endpoints.

Read the full post here: volexity.com/blog/2026/10/1…

#dfir #threatintel #memoryanalysis #memoryforensics
View quoted post on X
1 replies 7 reposts 26 likes 5.3K views View on X
Andrew Case Verified account @attrc
Huge congrats @ashl3y_shen, @k8em0, and @fr0gger_ !!
Oh wow, I just found out I'm a finalist for Practitioner of the Year (DFIR / Threat Intelligence) in the @SANSInstitute Difference Makers Awards! Thank you to whoever nominated me. It means so much! 🥹

Congrats to @k8em0 and @fr0gger_ too, you both totally deserve it!
View quoted post on X
1 replies 2 reposts 14 likes 1.5K views View on X
Andrew Case Verified account @attrc
Nearly a 1,000 ways to go from regular user to full system control. Given the default lack of driver signing enforcement, this is quite concerning.
OpenAI Verified account @OpenAI 5d
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.

In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.
View quoted post on X