A skill, applied

Static malware analysis

I refactored an obfuscated PowerShell loader, identified its decode and execution functions and emitted decoded commands to expose later-stage behaviour.

Experience at Growing MSSP with Offensive Services

Growing MSSP with Offensive Services

From obfuscated PowerShell to MSBuild injection

Malware Analysis / Incident Response

I unpacked a staged loader to explain its MSBuild injection, C2 and registry persistence, then checked which behaviours had occurred on the affected endpoint.

Read the story

Static malware analysis

From obfuscated PowerShell to MSBuild injection

Viewed history

Ask about my work.