2022 European Collaboration with the University of Applied Sciences Leiden
Summary: In 2022, Volexity partnered with the University of Applied Sciences Leiden to establish a 20-week Minor Memory and Malware Forensics program, onboarding two Dutch interns, Lukas van Rijn and Anthony Branger, in February 2022 after they completed the Malware and Memory Forensics with Volatility course over two weeks. Van Rijn, working with Shell Cyberdefense's red team, reconstructed memory-resident Cobalt Strike artifacts across three scenarios using Volatility and Yara, while Branger manually mapped a kernel-level driver in memory that bypassed EDR technology and some Volatility plugin detections.
What's compelling: A student with no prior Cobalt Strike knowledge reconstructed its memory artifacts in weeks, and another built a kernel-level backdoor that evaded EDR and Volatility detections - the same technique Kaspersky reported GhostEmperor using in 2021.
Read the original at Volexity Blog ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026