PUBLIC_RECORDS
Loading projects…
A Vision Transformer pipeline that converts Virtual Address Descriptor regions from Windows memory snapshots into fused Markov, entropy, and metadata images for malicious-process detection and region-level attribution.
A full-stack memory-triage workspace that joins VolMemLyzer evidence, tunable ATT&CK-aligned scoring, process inventory, and VADViT explanations in one exportable investigation.
An execution-based benchmark that measures published Sigma coverage for LSASS credential dumping, separates telemetry gaps from rule-logic misses, and tests how detections survive operator-controlled changes.
A modular Python toolkit over Volatility 3 for cached and parallel plugin execution, registry-driven feature extraction, normalized artifacts, and stepwise DFIR triage.
An evidence-based harness for evaluating a security triage agent against telemetry-borne prompt injection, with reproducible baselines and attack-surface measurements committed before any model-backed claims.
A completed academic malware-analysis project that extracted disassembly-derived control-flow and call-graph representations and evaluated graph-based and transformer-based models for binary and multiclass malware classification.