Paul Rascagnères @r00tbsd

Lord of Loaders at @Volexity | Mastodon account: 🐘 @[email protected] | Bsky @r00tbsd.bsky.social r00ted.com World Joined April 2010

Tweets

292
Followers

17K
Following

2K
Likes

8K

volatility @volatility

4 months ago

We are very excited to announce that Volatility 3 has reached parity with Volatility 2! With this achievement, Volatility 2 is now deprecated. See the full details in our blog post: volatilityfoundation.org/announcing-the…

3 157 357 53K 51

Volexity @Volexity

4 months ago

Congratulations to all of the Volatility contributors - this was no small feat! We are proud to be a sustaining sponsor of this important open-source project that remains the world’s most widely used memory forensics platform. #dfir

volatility @volatility

4 months ago

3 157 357 53K 51

0 5 14 3K 0

Volexity @Volexity

5 months ago

.@Volexity #threatintel: Multiple Russian threat actors are using Signal, WhatsApp & a compromised Ukrainian gov email address to impersonate EU officials. These phishing attacks abuse 1st-party Microsoft Entra apps + OAuth to compromise targets. volexity.com/blog/2025/04/2… #dfir

1 64 203 131K 122

Andrew Case @attrc

5 months ago

Check out this great research and new open source tool by our threat intel team!

Volexity @Volexity

5 months ago

Check out this great research and new open source tool by our threat intel team!

1 49 119 10K 29

Download Image

1 3 12 3K 7

Volexity @Volexity

5 months ago

Today, @Volexity released GoResolver, open-source tooling to assist reverse engineers with obfuscated Golang samples. @r00tbsd & Killian Raimbaud presented details at INCYBER Forum earlier today. Learn how GoResolver works + where to download it: volexity.com/blog/2025/04/0… #dfir

1 49 119 10K 29

Download Image

PIVOTcon @pivot_con

6 months ago

📣 Oops!... They did it again!!! 61 Talks submitted and so many too good that, once again, we had to increase a bit the number of accepted talks. 🔥 #PIVOTcon25 Agenda is finally here, and the caliber is insane!!! Check it out ➡️ link below in second post #CTI #ThreatIntel 1/19

2 20 32 6K 4

Download Image

Volexity @Volexity

7 months ago

.@Volexity recently identified multiple Russian threat actors targeting users via #socialengineering + #spearphishing campaigns with Microsoft 365 Device Code authentication (a well-known technique) with alarming success: volexity.com/blog/2025/02/1… #dfir #threatintel #m365security

1 51 100 30K 29

Volexity @Volexity

9 months ago

This talk is a great way to watch/listen to the details behind the work @stevenadair, @5ck, @tlansec + @Volexity’s #threatintel & IR teams did to investigate the Nearest Neighbor Attack. The related blog post is here: volexity.com/blog/2024/11/2…

volatility @volatility

9 months ago

1 18 20 5K 8

0 4 13 2K 1

Volexity @Volexity

9 months ago

.@Volexity has developed a new #opensource tool, “HWP Extract”, a lightweight Python library & CLI for interacting with Hangul Word Processor files. It also supports object extraction from password-protected HWP files. Download here: github.com/volexity/hwp-e… #dfir #threatintel

1 40 85 8K 17

Steven Adair @stevenadair

10 months ago

Just gave a talk about the Nearest Neighbor Attack at #CYBERWARCON and had a great time detailing our findings. This was a lot of great work by our @Volexity team and special thanks to @5ck and @tlansec for the long hours working on it! Def. one of our wildest #DFIR engagements!

Volexity @Volexity

10 months ago

7 178 386 93K 153

3 18 99 12K 16

Volexity @Volexity

10 months ago

.@Volexity’s latest blog post describes in detail how a Russian APT used a new attack technique, the “Nearest Neighbor Attack”, to leverage Wi-Fi networks in close proximity to the intended target, while the attacker was halfway around the world. volexity.com/blog/2024/11/2… #dfir

7 178 386 93K 153

5ck @5ck

10 months ago

@stevenadair and I presented on this last month at #FTSCon (IYKYK). Steven is also presenting today @CYBERWARCON. Really excited to finally share this research publicly! It's probably one of the more crazy/interesting IR engagements we've ever worked! #DFIR #ThreatIntel

Volexity @Volexity

10 months ago

7 178 386 93K 153

1 10 17 3K 1

Volexity @Volexity

10 months ago

.@Volexity has published a blog post detailing variants of LIGHTSPY & DEEPDATA malware discovered in the summer of 2024, including exploitation of a vulnerability in FortiClient to extract credentials from memory. Read more here: volexity.com/blog/2024/11/1… #dfir #threatintel

0 50 83 12K 21

Paul Rascagnères @r00tbsd

11 months ago

Tomorrow I will do an unexpected talk about edge-security incidents at @hack_lu. I will present the behind the scenes of the recent incident responses where we have been involved. #hacklu

0 4 23 2K 1

Xavier Mertens @[email protected] 🇧🇪 @xme

11 months ago

« #DFIR people have two best friends: strings and grep » (@r00tbsd) #QOTD

2 2 8 1K 0

volatility @volatility

11 months ago

There are only a few tickets left for #FTSCon & we are planning to close registration Monday! We are excited to see all of you & hear great talks by amazing speakers from across the industry. Register here: events.humanitix.com/from-the-sourc… #dfir

0 5 6 3K 1

Steven Adair @stevenadair

11 months ago

We are hiring! Come join @Volexity's Threat Detection team. This is a SOC-type role with purview across our customers to identify suspicious & malicious activity using our telemetry across network, EDR/AV, email, logs & more! Take a look! volexity.com/company/career…

1 23 48 5K 14

Volexity @Volexity

11 months ago

@tlansec @volatility And here is another opportunity to hear a talk from @Volexity at #FTSCon on October 21: Steven Adair (@stevenadair) and Sean Koessel (@5ck ) will present "The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access" x.com/volatility/sta…

volatility @volatility

11 months ago

0 6 15 4K 1

Download Image

0 5 3 2K 1

volatility @volatility

11 months ago

We are excited to announce the opening keynote for #FTSCon: @Volexity's Steven Adair & Sean Koessel will present "The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access". Event details + how to register: volatilityfoundation.org/from-the-sourc… #dfir