- SIGMA - Generic Signature Format for SIEM Systems (core maintainer)
- SIGMA HQ Rule Management GUI (author)
- Malicious Command-Line (MAL-CL) (author)
- EVTX-ETW-Resources (co-author and maintainer)
- LOLDrivers (co-creator and maintainer)
- LOLRMM (co-creator and maintainer)
- Symantec-EDR-Internals
- Sigconverter (maintainer)
- Misc-Research
- Information Security Mind Maps
- C2 Matrix (contributor)
I write a blog on medium about Detection, DFIR, Windows Internals, Malware and much more. Check it out here!
| CVE | Description |
|---|---|
| CVE-2019-19547 | Unauthenticated XSS in the Symantec EDR (SEDR) |
| CVE-2020-5839 | Information Disclosure In Symantec EDR (SEDR) |
| CVE-2020-12593 | Information Disclosure In Symantec EDR (SEDR) |
| CVE-2021-44750 | Arbitrary Code Execution in the WithSecure Support Tool |
| CVE-2022-1823 | Improper privilege management vulnerability in McAfee Consumer Product Removal Tool |
| CVE-2022-1824 | An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool |
| CVE-2022-37025 | Improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) |