Update:

Our velociraptor plugin `Windows.Memory.Mem2Disk` can detect RAM injections and fileless malware.

We tested it against (among others) the C2 frameworks Sliver, Havoc and Mythic. All three were detected.

It was recently featured in a blog post by Mike Cohen:

https://docs.velociraptor.app/blog/2025/2025-11-15-memory-analysis-pt1

Stay tuned for memory analysis with velo part 2!

#C2 #detection #memoryforensics #velociraptor #DFIR #cybersecurity #infosec #pwr2

Update:

Our velociraptor plugin `Windows.Memory.Mem2Disk` can detect RAM injections and fileless malware.

We tested it against (among others) the C2 frameworks Sliver, Havoc and Mythic. All three were detected.

It was recently featured in a blog post by Mike Cohen:

https://docs.velociraptor.app/blog/2025/2025-11-15-memory-analysis-pt1

Stay tuned for memory analysis with velo part 2!

#C2 #detection #memoryforensics #velociraptor #DFIR #cybersecurity #infosec #pwr2

🎉Biggest #privacy win of the week: Bill C2 was blocked! 💪

Can't believe we missed this, it's a HUGE victory for Canadians - and the whole world. 🔒 🇨🇦

➡️ Learn more on bill #C2: https://tuta.com/blog/canada-bill-c2-surveillance

📢 You can still sign the petition, the more, the merrier 👏 https://www.ourcommons.ca/petitions/en/Petition/Details?Petition=e-6627

🎉Biggest #privacy win of the week: Bill C2 was blocked! 💪

Can't believe we missed this, it's a HUGE victory for Canadians - and the whole world. 🔒 🇨🇦

➡️ Learn more on bill #C2: https://tuta.com/blog/canada-bill-c2-surveillance

📢 You can still sign the petition, the more, the merrier 👏 https://www.ourcommons.ca/petitions/en/Petition/Details?Petition=e-6627