RESX
Binary reconnaissance workbench for PE structure, exports, disassembly, symbols, CFG, pseudo-C, syscall stubs, and JSON automation.
PROJECTS
BLACKBIRD
Kernel-backed Windows analysis platform for driver telemetry, ETW, memory and process inspection, and detection-chain review in one operator interface.
ActiveBreach Engine
Controlled Windows syscall research engine for validating telemetry assumptions at the user-to-kernel execution boundary.
Vigil
Focused ETW utility for watching protected filesystem access and process context around sensitive resources.
Vesuki
Rust control-flow hardening research using proc-macro transforms, dispatcher paths, and randomized structural noise.
Valv
Compile-time Rust string encryption with AEAD-backed engines, closure-scoped plaintext, zeroization, and runtime-bound key support.
CCGT-Packer
Post-build Windows packing research for PE metadata, encrypted literal storage, and controlled runtime recovery.