DISCLAIMER: Please note that any personal posts, comments, articles, or opinions posted here are solely my own and do not represent the official views, policies, or positions of any employer, company, or affiliated organization.
opinions, security research, software, and my relentless pursuit of knowledge
CONFIDENTIALITY·INTEGRITY·AVAILABILITY·AUTHENTICATION·NON‑REPUDIATION
Hello, my name is Roman,and this is my killer placeholder webpage.
"Hybrid" authentication systems for cloud/local connected environments.
Group Policy management and hardening.
Federated authentication systems.
Vigilant in pursuing using best practices for: Preservation of evidence, Analysis, Triage, and documention of work and discoveries.
I am currently engaged in active work on a evaluating the data from a recent attack that has proven to be a rich
case study due to the wide range of persistence vectors and EDR evasion techniques that the attacker's malware utilized.
Pre-boot / Platform firmware security auditing.
Intel TXT, Intel AMT, TPM, BootGuard, and SecureBoot code authenticity verification and root-of trust validation.
Engineering systems able to gracefully recover from Ring 0 exploitation via protection by Hypervisor in Ring -1.
Building a high quality skillset in red team methodologies and exploit development. — Security+ exam scheduled within a few weeks, OSCP/PNPT/eJPT on the roadmap.