Amanda Rousseau

@malwareunicorn

Malware Research Unicorn . Interested in Malware, Reverse Engineering, and Fashion. DEF CON. My thoughts are my own. Creator

San Francisco, CA
Joined February 2014

Tweets

You blocked @malwareunicorn

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @malwareunicorn

  1. Pinned Tweet
    May 8

    Ahhhhh! Our talk "FINDING XORI: MALWARE ANALYSIS TRIAGE WITH AUTOMATED DISASSEMBLY" got accepted at !

    Undo
  2. 8 hours ago

    There is always a pet conference the same time as in vegas. If they can just combine ...

    Undo
  3. 8 hours ago

    Hey girl, you are just like a *pointer, something I would only dereference, but never devalue ;)

    Undo
  4. 9 hours ago

    Better yet, why aren't there booth puppies?

    Show this thread
    Undo
  5. 9 hours ago

    Why aren't there booth dudes?

    Show this thread
    Undo
  6. 10 hours ago

    Also don't assume that someone dressed nicely at a booth is forced to do so. I was wearing prada heels at my company's booth and someone asked me if I was being forced to dress like that. Haha no, I like fancy heels.

    Undo
  7. 12 hours ago

    Just a reminder, new malware is not considered an 0-day.

    Undo
  8. 14 hours ago
    Undo
  9. Undo
  10. Retweeted
    Jun 6

    More CFPs today for - thank you wonderful people! Keep them coming. We would love to see more female submissions this year. If you need some help or assistance please reach out or DM me!

    Undo
  11. Jun 7

    Also thank you to for getting me VB6 to play with 👍

    Show this thread
    Undo
  12. Jun 7

    What Year Is It? VB6 Payload Crypter. It’s a little late since tweeted it, but was a fun one to do with

    Show this thread
    Undo
  13. Retweeted
    Jun 5

    Initialization in Modern C++.

    Undo
  14. Retweeted
    Jun 6

    a couple years ago this kid hate-forked tor to make an "sjw-free version" but he forked the wrong repo then accidentally gave me push access to all his repos.. now he's stolen an APC for a drug-addled joy ride but not before posting this selfie with it

    Undo
  15. Retweeted
    Jun 6

    UAC Bypassing Using msdt.exe XML/Execution Via Feature in Msdt - & RawLog - & Video UAC-Bypass

    Undo
  16. Retweeted
    Jun 6

    Wrote a new blog post for a tool I'm releasing called BinSequencer - Generates YARA rules from Win PE samples based on opcode abstraction. It was a good excuse to play with a few years ago, maybe someone will find it useful

    Undo
  17. Jun 5
    Show this thread
    Undo
  18. Jun 5

    I feel like if you chant "cyber" three times in the bathroom mirror, a tech evangelist will appear behind you.

    Show this thread
    Undo
  19. Jun 5

    I just got these airpods, and I fear that one day I might lose one in the worst possible way: either my puppy eating them or dropping them in the toilet somehow.

    Undo
  20. Retweeted
    Jun 5

    Screenshots from the "Master of Forgers", from Nigeria, while working. 😂😂😂 Not seen the final image, but I would be surprised if it was anything not telling it's obviously edited...

    Show this thread
    Undo
  21. Jun 5

    Simple example of a code injection rule similar to the one we use in our VM analysis

    Show this thread
    Undo

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·