Ravi Prakash Mishra

About Ravi Prakash Mishra

As a Staff Threat Research Engineer at Carbon Black with over 8 years of experience in the field, my work focuses on advancing behavior-based detection engineering for enterprise Endpoint Detection and Response (EDR) and Endpoint Extended Detection and Response (EEDR) platforms. My core competencies include Threat Analysis, Detection Engineering, Threat Hunting, and Security Engineering, with a specialized focus on designing and optimizing high-fidelity detections using Windows internals, such as ETW, AMSI, WMI, and process and memory telemetry.At Carbon Black, I have contributed to increasing proactive detection coverage and reducing false positives through rule optimization and telemetry refinement. My role also includes leading vulnerability response through the Microsoft Active Protections Program (MAPP), ensuring zero-day readiness, and driving detection efficacy for industry-standard evaluations like MITRE ATT & CK, AV-Test, and SE Labs. My work is rooted in a commitment to developing scalable, research-driven detection systems to safeguard enterprises from advanced threats.

Experience

1. Staff Threat Research Engineer

   Carbon Black

   Aug 2022 — Present · IN

   Led behavior-based detection engineering for enterprise EDR/EEDR, focusing on resilient attacker TTPs over static indicators.Designed high-fidelity detections using Windows internals (ETW, AMSI, WMI, process & memory telemetry).Increased proactive detection coverage by ~40% through structured threat hunting and rule optimization.Reduced false positives by ~30% via detection tuning and telemetry refinement.Owned vulnerability response through Microsoft Active Protections Program (MAPP), enabling zero-day readiness.Drove detection efficacy for MITRE ATT & CK Evaluations, AV-Test, and SE Labs.Converted threat research into YARA rules, behavioral signatures, and watchlists.Acted as senior escalation point for high-severity security incidents, performing RCA and remediation.Implemented CI/CD pipelines (GitHub Actions) for scalable detection content delivery.Authored threat intelligence reports on ransomware and advanced malware campaigns

Education

• Centre for Development of Advanced Computing (C-DAC)

  PG-Diploma, System Software Development

  2010 — 2010

• Mahatma Jyotiba Phule Rohilkhand University

  Bachelor of Technology - BTech, Computer Science

Skills

• Intrusion Detection
• Malware Analysis
•  Tools Development
• Computer Security
• Sql
• Incident Response
• Cybercrime
• Security Research
• Antivirus
• Computer Forensics
• Networking
• Trading Knowledge, Capital,Equity and Derivatives Markets Knowledge
• Software Development
• Penetration Testing
• Vulnerability
• Ollydbg
• Operating Systems
• Reverse Code Engineering
• Web Application Security
• C++
• Reverse Engineering
• C
• Vulnerability Assessment