Principal Security Researcher @ Microsoft (MSTIC). Software development, detections, security and DFIR. Thought/opinions are mine, not those of my employer.
UK
Joined July 2010
- Tweets543
- Following387
- Followers773
- Likes469
New release of VirtualDesktopUtils (0.0.5). Just some minor styling and start up tweaks:
github.com/woanware/VirtualD…
So @JeremyChelot I take back the good things I have said about @youfibre. Went for the 2GB upgrade, it appears the speed wasn't upgraded, had to chase for new equipment to be sent out, then been without a phone line for a week, but it appears cannot get the contract downgraded?
VirtualDesktopUtils v0.0.3 - Windows autostart, update checks, improved key handling
github.com/woanware/VirtualD…
First computer related post in nearly 2 years, 4 for software release, and not even cyber ;-)
github.com/woanware/VirtualD…
"The Windows11 virtual desktop utility"
Would be epic as a PowerToy! @Niels9001
Beware if you travel with @easyJetholidays when there is a time change in your home as their systems cannot cope, tell you the wrong time, and then leave you standing outside your hotel for hours
woanware retweeted
MSTIC is hiring Threat Intel Analysts in the UK: jobs.careers.microsoft.com/g…
woanware retweeted
MSTIC is looking for Senior Security Researchers (Malware Reverse Engineers) in the US and Australia to join our MSTIC-RE team. This is an exciting opportunity to make a tangible difference in combating Nation State (NS/APT/DHA) and ransomware threats.
jobs.careers.microsoft.com/g…
woanware retweeted
👋 Microsoft security teams are hiring.
Several #MSTIC roles:
•careers.microsoft.com/us/en/… (APT technical analysis required)
•careers.microsoft.com/us/en/… (incident response experience preferred)
•careers.microsoft.com/us/en/… (signals, data science)
+partner teams: nitter.gq/BakedSec/status/147819…
We have a new remote US opening on our team - looking for experienced (5+yrs) infosec pros who intimately understand the attacker lifecycle, have expertise in at least one area (DFIR, RE, Intel, etc.), (1/2) careers.microsoft.com/us/en/…
New version for etw-event-dumper (v1.0.1), fixes a BOM issue on the output file. Thanks @williballenthin for reporting!
github.com/woanware/etw-even…
New tool (ewt-event-dumper) using code from the Mandiant SilkETW project, it's designed for bulk hooking/collection of ETW events for large numbers of ETW providers e.g. I want to collect over 150 providers, using a simple configuration:
github.com/woanware/etw-even…
Updated RiskIqSharp lib, published as v1.0.0, with more API's implemented:
github.com/woanware/RiskIqSh…
Started working on a library (.Net 6) to interact with the RiskIQ/PassiveTotal API:
github.com/woanware/RiskIqSh…