A skill, applied

Malware analysis

I deobfuscate staged scripts, inspect controlled execution and compare observed payload behaviour with endpoint telemetry, separating laboratory execution from what happened on the client device.

Experience at Growing MSSP with Offensive Services

Growing MSSP with Offensive Services

From obfuscated PowerShell to MSBuild injection

Malware Analysis / Incident Response

I unpacked a staged loader to explain its MSBuild injection, C2 and registry persistence, then checked which behaviours had occurred on the affected endpoint.

Read the story

Malware analysis

From obfuscated PowerShell to MSBuild injection

Viewed history

Ask about my work.