About
I am a Security Researcher.
I enjoy discovering how things work. I enjoy solving complex problems and discovering new ways attackers evade detection. I have worked a long time to sharpen my spear to enable SOC analysts and threat hunters. My work translates caffeine and logs into results for my fellow analysts.
☕ Detection Logic (C)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
#include <stdio.h>
#include <stdbool.h>
#include <stdlib.h>
bool caffeinated(int cups) {
return cups >= 2;
}
int main(void) {
char buffer[100];
long cups;
char *endptr;
printf("How many cups of coffee did you drink? ");
if (fgets(buffer, sizeof(buffer), stdin) == NULL) {
printf("Input error.\n");
return 400;
}
cups = strtol(buffer, &endptr, 10);
if (endptr == buffer || *endptr != '\n') {
printf("Invalid input. Enter a number.\n");
return 422;
}
bool user = caffeinated((int)cups);
bool logs = true;
if (user && logs) {
printf("Detections generated for analysts.\n");
return 0;
}
printf("No detections generated.\n");
return 404;
}
I have a strong interest in malware analysis and I am actively learning malware development to better understand how offsec personnel think. I am currently learning from Maldev Academy, Sektor 7 training and Bof Development course. Learning how malware is built directly improves how I detect, monitor and analyze malware.
Some of my favorite projects have been Sysmon-Builder, Detection-Wizard, Defensive-Rules, Hunt-AI.
