Volatility Meets Ai Transforming Linux And Windows Memory Forensics For Modern Threats

This talk covers the importance of memory forensics in investigating advanced threats such as fileless malware and kernel-level rootkits. The speaker introduces a scalable framework that combines Volatility 3 with Retrieval-Augmented Generation, making memory analysis more efficient for both Linux and Windows systems while reducing inaccuracies associated with large language models. Attendees will learn how to leverage Volatility 3 to extract critical memory artifacts, enhance these artifacts with threat intelligence and behavioral context, and utilize a RAG-powered pipeline for improved threat detection and investigation efficiency.