- Adam Bridge: NDIS Packet Scan
- Alexander Tarasenko: Pykd/Windbg Address Space
- Bart Inglot: Scheduled Task and Job Scanners
- Fred House, Andrew Davis, and Claudiu Teodorescu: Shimcache Memory Scan
- James Habben: Evolve Web Interface
- Joe Greenwood: Hacking Team RCS Attribution
- Loïc Jaquemet: Haystack
- May Medhat (et. al.): GVol Tool
- Monnappa Ka: Linux Memory Diff
- Philip Huppert: VM Live Migration
- Ying Li: Python Strings and SSH Keys
