Aditya Singh

LTIMindtree

09.2020 - Current

Analysis of several malware families related to different platforms.
Knowledge and experience on Windows Defender and MDATP for Windows, Mac and Android.
Mentored junior consultants, helping them enhance their skills and contribute more effectively to projects.
Experience in adding detection using code/string/cert/imphash analysis.
Basics of kusto query for checking alerts, signature telemetry and data fetching.
Exploit tools for generating payloads and adding detection on them using different frameworks for windows and cross platform.
My role included:
Working on different samples and giving verdict based on their code and behavior during analysis.
Adding generic detection using different types of signatures present (YARA, HSTR, ScriptBrute, etc).
Covering samples present in the wild using VT Queries.
Worked on EDR to check alerts using Cyber Explorer and Kusto Queries.
Handling multiple hi pri customer submission for multiple platforms.
Creating analysis reports on different malware families.
Created writeups for multiple families with full analysis details.
Mentoring interns and new joiners in the team.
The technologies used: Java Analysis, Assembly Programming, Debugging (Basics).
Tools used: IDA Pro, Olly Dbg, Jadx decompiler, JEB Tool, Hex Editor, Wireshark, BinText, Far manager, MobSF, Genymotion, d2j-dex2jar, Sysinternal Tools, CFF Explorer, APKTool, jd-gui, Medusa, Mango, Cyber Explorer.