Max 'Libra' Kersten

Malware analyst and reverse engineer, author of the Binary Analysis Course. DMs are always open. Opinions are my own and not the views of my employer.

[Max 'Libra' Kersten @Libranalysis]

My reverse engineering workflows survey is still ongoing! In less than 3 minutes, you can fill it in and help out: https://t.co/kFxaWqYXHU

[Gi7w0rm @Gi7w0rm]

Since I officially finished my bachelor degree last month, I am now looking for work.
If you are offering a job in Cyber Threat Intelligence, please reach out!

More infos in the first comment below.
#infosec #CTI #JobSearch

[Max 'Libra' Kersten @Libranalysis]

Ever ran a script in Ghidra that you wanted to cancel, only to find out that the script would not let you? The TaskMonitor handles the cancellation event, December's Ghidra tip dives into the details: https://t.co/QuvM1gDiCn

[Max 'Libra' Kersten @Libranalysis]

Over the past few months, we @Trellix have kept our eyes open for election related threats with regards to the U.S. presidential elections. We have summarised our findings in a blog: https://t.co/eqhJgT9DFM

[Max 'Libra' Kersten @Libranalysis]

Ghidra can do a lot, but some tasks are best outsourced to (micro)services! How? This month's tip helps you along: https://t.co/GuFy5G8yRb

[Max 'Libra' Kersten @Libranalysis]

I am also on BlueSky: https://t.co/IFo8cpyBJt

[Max 'Libra' Kersten @Libranalysis]

Do you want to iterate over all defined strings in a program in Ghidra? This month's tip got you covered: https://t.co/CB9tn9mfha

[Max 'Libra' Kersten @Libranalysis]

@regeciovad Thank you Dominika! :)

[Max 'Libra' Kersten @Libranalysis]

Libra.setAge(Libra.getAge() + 1);

[Max 'Libra' Kersten @Libranalysis]

@ValeryMarchive Merci beaucoup!

[Max 'Libra' Kersten @Libranalysis]

@Myrtus0x0 Thank you!

[Max 'Libra' Kersten @Libranalysis]

@sud0suw Thank you Suw!

[Max 'Libra' Kersten @Libranalysis]

My survey into reverse engineering workflows is still ongoing, if you haven't already, please take 3 minutes of your time, I promise it wont take more!
https://t.co/kFxaWqYXHU

[Max 'Libra' Kersten @Libranalysis]

Ever wanted to handle all files within your Ghidra project, even the ones in subfolders? This month's Ghidra tip got you covered: https://t.co/jFzW7sTWnt

[Max 'Libra' Kersten @Libranalysis]

Reverse engineering workflows can always be improved. I'm running a survey to see how! Please take 3 minutes to anonymously fill in what you think can be improved: https://t.co/30Dn457LwE

[Max 'Libra' Kersten @Libranalysis]

Pushed an update to the @Trellix GhidraScripts repository on GitHub which fixes a few bugs in the Golang function recovery script: https://t.co/ugAKwQQ5eR

[Max 'Libra' Kersten @Libranalysis]

@sud0suw Well deserved! Enjoy it! :)

[Max 'Libra' Kersten @Libranalysis]

With my workshops and talk at the @DianaInitiative, @BlackHatEvents, and @defcon two weeks ago while representing @Trellix, I reflect back on my experiences at the conferences: https://t.co/DvP0MeXf5E

[Max 'Libra' Kersten @Libranalysis]

The Ghidra scripts to create/use the databases can be found here: https://t.co/6UdvRvAxPh
🧵5/4

[Max 'Libra' Kersten @Libranalysis]

The @Trellix blog which dives into the nitty gritty of my @defcon talk can be found here: https://t.co/ZbIdqWRWtx
🧵1/4

[Max 'Libra' Kersten @Libranalysis]

The precompiled Golang files can be found here: https://t.co/Adg8QhBtzp
🧵4/4