LE BERRE Stéfan

CEO/Co-Founder - @ExaTrack

[SwitHak (👁) @SwitHak]

Analyse et recoupement de malwares avec #Exalyze By @ExaTrack
At OSSIR meeting
↘️
https://t.co/nOfq5ev1b6

[ExaTrack @ExaTrack]

🎯 Happy 2026, Threat Hunters!
We compiled 12 battle-tested tips to hunt the unknown, no IOCs, just anomalies.
🔍 Windows/Linux
💥 Scaled to 10K+ endpoints
👉 https://t.co/PJkHLMdiGR
#ThreatHunting #Cybersecurity #DFIR #UnknownThreats

[LE BERRE Stéfan @Heurs]

Discover a new linux backdoor hidden for 10 YEARS in a critical HTTP server, waiting for a "magic packet" to wake up.
Undocumented TTP. Full report: https://t.co/omP65ga7e9 #Malware #ThreatHunting #Cybersecurity @ExaTrack @LoginSecurite

[Exalyze @Exalyze_io]

Exalyze 1.0 is out 🥳
What's new on it?
- Analysis pipeline rebuild for transparent updates
- Yara generation (opcodes) have been improved
- Pivots added for IP/domains to @virustotal @shodanhq @censysio @onyphe @fofabot
See you on https://t.co/OUYhNuNZLa

[LE BERRE Stéfan @Heurs]

I'm glad to share my talk at @Botconf 2025!
Do you want to know how we compare a sample with 150k others in seconds on @Exalyze_io? This talk is made for you 🚀
At the end, you'll get a hint on what's coming next for Exalyze! 😉
https://t.co/ByVdJXGBTu
https://t.co/AVASoPQLrp

[ö @r0keb]

Good morning! Just published a blog post diving into Windows Kernel Pool internals: basics, memory allocation functions, internal structures, and how Segment Heap, LFH, and VS work.
https://t.co/2KlYba9gxc

[Alexandre Borges @ale_sp_brazil]

A well-done article written by @memn0ps:

Hypervisors for Memory Introspection and Reverse Engineering:

https://t.co/wLCst4IYqY

#reverveengineering #infosec #hypervisor #memoryanalysis #windows #rust

[LE BERRE Stéfan @Heurs]

🚀 Take your malware analysis skills to the next level with Exalyze
Discover our unique capabilities to compare malware code with our entire database, identifying similar samples and uncovering hidden connections.
👉 https://t.co/AVASoPQLrp
@Exalyze_io

[NoLimitSecu @nolimitsecu]

#Podcast #Cybersécurité

Épisode #501 : détection vs. recherche de compromissions (suite de l'épisode #491), avec @Heurs

https://t.co/GnkfghqjCn

[Nathan Blondel @slowerzs]

Think HVCI and kCET mean the end of kernel code execution? I wrote a blogpost exploring an alternative way to execute a kernel payload! :)
https://t.co/Ty542HtdqL

[herrcore @herrcore]

Probably worth reposting this for the first day of #100DaysofYARA

[LE BERRE Stéfan @Heurs]

Kdrill update 📢
ARM64 support added, hunt those rootkits before they adapt to your Winows!
https://t.co/94X4ZbSjhi

[ExaTrack @ExaTrack]

3+ YEARS of stealth! We uncovered new tactics used by the perfctl malware, including a userland rootkit & an SSH backdoor (a single SPACE in /etc/passwd!). More insights: https://t.co/2rUPbEtNZP #cybersecurity #threat_hunting #linux #infosec #perfctl #rootkit #ssh #exatrack

[The Brofessor @Glacius_]

Hey :)

If you missed your daily Frenglish dose, my talk about Octo at @virusbtn is now available on Youtube:
https://t.co/h6qRJ4QEYG

Talked about malware, infrastructure, bulletproof hoster, and more. The full paper is also available in the description :)

@teamcymru_S2

[REverse_Tactics @Reverse_Tactics]

Slides & video from our @GrehackConf talk "Attacking Hypervisors - A Practical Case" are online! Learn how we exploited vulnerabilities to escape VirtualBox during Pwn2Own Vancouver 2024: https://t.co/c90C2pnmMa

[Clement Rouault @hakril]

In our search for new forensic artifacts at @ExaTrack, we sometimes deep dive into Windows Internals.
This one is about COM and interacting with remote objects using a custom python LRPC Client.

STUBborn: Activate and call DCOM objects without proxy: https://t.co/FKPocJRN2Z

[Alexandre Borges @ale_sp_brazil]

So far, I have written 706 pages to help the security community. My goal will be writing new articles of the Exploiting Reversing Series (ERS), which is focused on security research. However, I am planning to write one or two additional articles of my previous series MAS (Malware Analysis Series) to finish it off.

10. https://t.co/6SNMK1u99L
09. https://t.co/YMTSBl5HLa
08. https://t.co/yvXoY9uWtf
07. https://t.co/DIcpSdRpfW
06. https://t.co/AvjPAaTmQN
05. https://t.co/4wFVoBGapZ
04. https://t.co/PE7JeEM5lm
03. https://t.co/QXa2To5Z4S
02. https://t.co/BPt9L7QFdW
01. https://t.co/vGnT26NOin

#windows #idapro #kerneldrivers #kernel #infosec #reversing #malwareanalysis #vulnerability #securecode

[Nicolas Krassas @Dinosn]

Kdrill: Python tool to check rootkits in Windows kernel https://t.co/8tFEKEZmnZ

[Can Bölük @_can1357]

Excited to share my latest article: PgC - a novel approach to disable Patchguard during runtime using basic memory management principles.
It has worked against every version of Patchguard for the last 7 years, without needing any updates!
https://t.co/H5dDddpuMP