- Adam Bridge: Linux (X) Windows & Atoms
- Alessandro De Vito: Chrome Ragamuffin
- Frank Block: Linux Glibc Heap Analysis
- Javier Vicente Vallejo: Symbolizemod
- Liam, Shachaf and Kyle (KSL Group): Threadmap
- Mark McKinnon: Volatility Autopsy Modules
- Michael Brown: SQLite Artifacts
- Peter Kalnai and Michal Poslusny (ESET): Browserhooks
- Xabier Ugarte-Pedrero (Cisco Talos): PyREBox
