Hi, I’m Pierre 👋
I work as a Senior Cybercrime Analyst at Sekoia.com, in the Threat Detection & Research (TDR) team.
What I work on#
- Adversary tracking
- Following cybercrime groups and their campaigns over time: tooling, TTPs, and how their operations change.
- Infrastructure hunting
- Pivoting on C2 servers, delivery chains and hosting patterns to map adversary infrastructure, ideally before it is used.
- Malware analysis
- Reverse engineering loaders, RATs and crypters, and writing the configuration extractors, unpackers and YARA rules that come with it.
About this blog#
This is where I keep my notes from that work: unpacking walkthroughs, obfuscation tricks, Windows internals and the small scripts that make analysis faster. The code is meant to be reused, so take it and adapt it.
Every article is written in Org mode in Emacs and exported with ox-hugo. Opinions here are my own.