Aurelien Thierry

- Forensics: Windows and Linux, disk, memory, log analysis - Forensics Research: MACB timestamps updates on Linux and BSD - Reverse-engineering: IDA, Ollydbg, Win64Dbg, gdb... - Malware Analysis & coordination with Threat-Intelligence teams - Monitoring and Detection: log collection (syslog, Guardium), SIEM tuning (QRadar) - Workshops and guest lectures on Forensics & Malware Analysis

- Malware Analysis: Writing modules for automated feature extraction - Conception and development of a malware detection engine based on graph matching (GRAP, in C++ and python) - Research within french and European projects (WIN4SMART)

Disassembly and detection of self-modifying malware - Semantics for self-modifying programs - Formalization and optimization of graph matching algorithms (C) - Scientific papers and conference talks (CCS, REcon, SSTIC, Malware) - Teaching assistant at École des Mines de Nancy

IT Security