My Best Work

• •Analyzed a fresh Agent Tesla sample using static and behavioral techniques
• •Mapped staging and execution flow and identified exfil patterns
• •Focused on what can be detected, not just reversing for fun

Environment: isolated lab, offline execution, behavioral tooling

• •Compared multiple PDF lures and highlighted what stayed consistent across them
• •Focused on attacker behavior and delivery paths, not just file trivia
• •Wrote it to be useful during live triage

Focus: scoping and patterns

• •KQL queries used to scope phishing and related activity
• •Detection logic built from real investigations
• •Queries and rules designed for fast pivoting during response