Eugene Gostyukhin

• Designed and implemented the solution to bypass undocumented behavior of PnP manager which made possible to ship stable release of PowerPath for modern Windows Server 2012 and 2012R2. • Provided reverse engineering expertise for solving incompatibility problems with other drivers and system components. • Implemented a driver for simulation of high-performance IO paths for Windows; that should minimize a need for expensive real hardware and shorten performance test cycle by 70% in some cases.

• Designed and implemented kernel extension and corresponding user-mode library for intercepting USB devices which is mandatory for customers who need HIPAA compliance. • Designed and implemented kernel extension for file system monitoring. • Designed and implemented driver for keyboard events monitoring for Windows agent.

• Developed unpacking module that has the ability to perform processing on executables at network speeds. • Implemented kernel mode to user mode interaction module for company product. • Reverse engineered and wrote internal reports on various malware.

• Maintained custom detection routines for TDL3/TDSS rootkit. • Reverse engineered and wrote the internal report on SpyEye banking trojan. • Implemented kernel memory dumper; reduced the need to manually analysis packed rootkits.