Nihar N. Deshpande

Encryption Detection-

• File header integrity check
• Entropy and extension monitoring.
• Incremental backup anomaly detection.

Threat hunt -Threat Watch

• Manual IOC based scan.
• Automated IOC crawler.
• Continuous threat data correlation

Fileless Footprint Detection in Backup

• YARA based detector
• Registry keys and Script files

Ransomware Research

• Blogs

Seqrite Hawkknut EDR-

• Policy writing and alert monitoring
• Coverage of ATT&CK framework
• Good understanding of Lateral movement policies.

Ransomware Protection POC development-

• Hooking Windows APIs using detours library.
• DLL Injection
• Identifying ways to prevent ransomware execution.

Wardwiz Anti-virus

• Malware Scanner for PE, PDF, LNK file formats
• Writing signatures as well as repair routines for viruses.
• Working experience with Ransomware detection.
• Web Scraping to download files
• Malware Signature generation utility