Ahmed Elmayyah

WORK HISTORY

EDUCATION

ABOUT AHMED ELMAYYAH

I\'m a cybersecurity professional with experience in multiple areas, including but not limited to: Platform Security, Malware Analysis, Digital Forensics and Incident Response, Threat Detection, and Purple Teaming. I hold the GCFA and eCRE certifications.I have experience working with various platform-level threats, including hardware threats such as DMA and Option ROM attacks, as well as firmware attacks such as the infamous Blacklotus and LoJax bootkits. Throughout my previous experiences, I have engaged with many prominent adversaries and threats, including Ryuk, Darkside, and LemonDuck. Alongside such engagements, I\'ve performed adversary emulation for threat actors and created threat detection use cases to enhance detection capabilities. I’ve also performed EDR assessments for different vendors using my custom modular C2 which I built from scratch.I\'m a big tinkerer, I enjoy working with electronics, hardware, low level stuff, reverse engineering, digital forensics, incident response, purple teaming, and malware analysis. I love breaking things as much as I love fixing them and finding ways to detect threats. I like work that benefits other people as well as myself. Personal publications and opinions are completely my own and do not represent or reflect on my employer whatsoever.