_____ Is Not a Security Boundary: Things I Have Learned and Things That Have Gotten Better from Researching Microsoft Software
Windows Operating System Archaeology
How Graphs Changed The Way Hackers Attack
Building a Better Moat: Designing an Effective Covert Red Team Attack Infrastructure
Not a Security Boundary: Bypassing User Account Control
Subverting Trust in Windows – A Case Study of the “How” and “Why” of Engaging in Security Research
An ACE in the Hole: Stealthy Host Persistence via Security Descriptors
Here Be Dragons: The Unexplored Land of Active Directory ACLs
An ACE Up The Sleeve: Designing Active Directory DACL Backdoors