UTC —:—:— 3-2-1 CONTACT

DISCLAIMER: Please note that any personal posts, comments, articles, or opinions posted here are solely my own and do not represent the official views, policies, or positions of any employer, company, or affiliated organization.

opinions, security research, software, and my relentless pursuit of knowledge

systemwarfare.net

CONFIDENTIALITY·INTEGRITY·AVAILABILITY·AUTHENTICATION·NON‑REPUDIATION



Hello, my name is Roman,and this is my killer placeholder webpage.


Total Throwback

Zones of Interest

POSITION
Identity: Authentication & Access

AD / Entra ID / IAM: AWS || Azure

"Hybrid" authentication systems for cloud/local connected environments.
Group Policy management and hardening.
Federated authentication systems.

Incident Response and Preparedness

Digital Forensics & Incident Response / Risk: Planning and Preparedness

Vigilant in pursuing using best practices for: Preservation of evidence, Analysis, Triage, and documention of work and discoveries.
I am currently engaged in active work on a evaluating the data from a recent attack that has proven to be a rich case study due to the wide range of persistence vectors and EDR evasion techniques that the attacker's malware utilized.

Infrastructure Security

System Hardening

Pre-boot / Platform firmware security auditing.
Intel TXT, Intel AMT, TPM, BootGuard, and SecureBoot code authenticity verification and root-of trust validation.
Engineering systems able to gracefully recover from Ring 0 exploitation via protection by Hypervisor in Ring -1.

Always Learning

Offensive Security / Reverse Engineering / Psychology of Cyber Adversaries

Building a high quality skillset in red team methodologies and exploit development. — Security+ exam scheduled within a few weeks, OSCP/PNPT/eJPT on the roadmap.

Random Thoughts, Reflections, and Code

SELECTED MUSINGS

Certifications

INSTRUMENTS

Connect

TRANSMIT