Threat Research / Software Engineering 👨💻 at @cybereason, previously - @sentinelone, @vmware, @lastlineinc, @avira and @kaspersky
Berlin
Joined November 2012
- Tweets631
- Following746
- Followers477
- Likes1.7K
Alexander Sevtsov retweeted
Hypervisors for Memory Introspection and Reverse Engineering by @memn0ps
secret.club/2025/06/02/hyper…
Alexander Sevtsov retweeted
Awesome Threat Detection and Hunting : github.com/0x4D31/awesome-th… credits @0x4D31
Alexander Sevtsov retweeted
Hunting Cobalt Strike Servers. A comprehensive view on the techniques… | by Bank Security | Medium #amazing hunting bank-security.medium.com/hun…
Alexander Sevtsov retweeted
The fourth article on Virtualization Internals Series is out - Digging into QEMU ! #virtualization #hypervisors #qemu #kvm
docs.saferwall.com/blog/virt…
Alexander Sevtsov retweeted
Zero to Hero: The process of reversing and exploiting complex vulnerabilities! teapawt.org/i/broadcasts/1rmxPkRrM…
Alexander Sevtsov retweeted
Spooky(🎃) ICEDID research is out with a configuration extractor and a C2 infrastructure validation utility. Great work by @bluish_red_ @DanielStepanic @dcode
elastic.co/security-labs/ice…
Alexander Sevtsov retweeted
These machine learning cheatsheets contain some of the best and well-organized ML content I've come across.
Sometimes, it's just good to understand the concept at a high level and it's context before going deep. This resource helps with that.
stanford.edu/~shervine/teach…
Alexander Sevtsov retweeted
Having spent 10 years architecting, building & running the engineering team for the world’s leading endpoint security product, it was refreshing to be able to put some thoughts down on paper with the @CyberhavenInc team, especially with the tens of “agents” on corporate machines.
💡Ironclad security and team productivity shouldn’t be mutually exclusive. A hybrid endpoint engineering approach that combines asynchronous detection with synchronous enforcement is key🔑
Read the latest from security legend @aionescu and our eng team: cyberhaven.com/blog/hybrid-e…
Alexander Sevtsov retweeted
Elastic Security Labs breakdown of LUNA Linux/Windows ransomware by @soolidsnakee, @DanielStepanic, @andythevariable, and myself.
elastic.co/security-labs/lun…
Alexander Sevtsov retweeted
I am beyond excited to drop new research today with my coauthor @cyberoverdrive on TA423/RedLadon (aka Leviathan). It’s rare for @threatinsight to partner with others but Sveva and @PwC Global Threat Intelligence Team are among the rarest talents. 1/3🧵
proofpoint.com/us/blog/threa…
documentation starts making sense when you regularly spend some time finding an answer in a haystack of Slack channels, or lost group chats
while putting expanses for renovation in a google spreadsheet, I just realised that I was on a call today with the man who created Google Docs