Hiroshi Suzuki (@herosi_t)

Pinned

H

Hiroshi Suzuki@herosi_t · Jun 21, 2019

Thanks to YOU, our course at #BHUSA have sold out now! However, don't worry about it. We will add several seats. Stay tuned! @BlackHatEvents blackhat.com/us-19/training…

herosi_t's tweet image. Thanks to YOU, our course at #BHUSA have sold out now!
However, don't worry about it. We will add several seats. Stay tuned! @BlackHatEvents

blackhat.com/us-19/training…

0

1

14

0

Hiroshi Suzuki Retweeted

I

IIJ-SECT@IIJSECT · Jul 18

TorNetとPureHVNCを実行する新種のローダーの調査 | IIJ Security Diary sect.iij.ad.jp/blog/2025/07/l… @IIJSECT

0

7

8

2

1.0K

Hiroshi Suzuki Retweeted

I

IIJ-SECT@IIJSECT · Jul 18

Technical Analysis of NailaoLocker Ransomware | IIJ Security Diary (in English) sect.iij.ad.jp/en/2025/07/tec… @IIJSECT

0

5

4

2

605

Hiroshi Suzuki Retweeted

I

IIJ-SECT@IIJSECT · Jun 20

ランサムウェアNailaoLockerの調査 | IIJ Security Diary sect.iij.ad.jp/blog/2025/06/r… @IIJSECT

0

11

24

9

3.0K

H

Hiroshi Suzuki@herosi_t · Mar 14

All YARA rules from this REsearch are publicly available! Additionally, the ida_bootkit_finder scripts automate the discovery of bootkit-related patterns for IDA analysis. Happy Hunting!🔬 github.com/binarly-io/Res…

BBINARLY🔬@binarly_io · Mar 13

Some exciting research to share from Binarly REsearchers @cci_forensics and @pagabuc -- a novel approach to UEFI bootkit detection. 🔥Read the technical paper: "UEFI Bootkit Hunting: In-Depth Search for Unique Code Behavior" 👉 binarly.io/blog/uefi-boot…

0

31

100

37

19.0K

Hiroshi Suzuki Retweeted

T

Takahiro Haruyama@cci_forensics · Mar 3

My presentation slides "UEFI Bootkit Hunting: In-Depth Search for Unique Code Behavior" @REverseConf are available online github.com/binarly-io/Res…

4

84

230

113

23.0K

H

Hiroshi Suzuki@herosi_t · Mar 25

I updated PyClassInformer to add several new features such as auto-renaming virtual methods, detecting user-defined classes, detecting possible constructors and destructors, tree-based widget to display class-related information and so on. github.com/herosi/PyClass…

HHiroshi Suzuki@herosi_t · Feb 27

I've released a new tool "PyClassInformer". It detects vftables in a program compiled with MSVC++ by parsing RTTI. It is written in pure python. So, it runs on MacOS and Linux as well as Windows. #cpp, #vftable, #RTTI, #IDA, #IDAPython, #ReverseEngineering github.com/herosi/PyClass…

1

28

98

49

17.0K

H

Hiroshi Suzuki@herosi_t · Feb 27

I've released a new tool "PyClassInformer". It detects vftables in a program compiled with MSVC++ by parsing RTTI. It is written in pure python. So, it runs on MacOS and Linux as well as Windows. #cpp, #vftable, #RTTI, #IDA, #IDAPython, #ReverseEngineering github.com/herosi/PyClass…

herosi_t's tweet card. Contribute to herosi/PyClassInformer development by creating an account on GitHub.

0

29

81

38

24.0K

Hiroshi Suzuki Retweeted

M

Minoru Kobayashi@unkn0wnbit · Feb 25

Hi #DFIR community, I'm excited to announce that I have published my new forensic tool for analyzing journal data from #Linux file systems (EXT4 and XFS). 🔗 github.com/mnrkbys/fjta This tool requires TSK's develop branch to recognize the XFS file system, so you will need to…

6

66

170

65

13.0K

H

Hiroshi Suzuki@herosi_t · Oct 23

#UAC (Unix-like Artifacts Collector) v3.0.0 has been released. Many of my PRs were also merged! Thanks, @tclahr. #DFIR #Linux

TThiago Lahr@tclahr · Oct 22

New #UAC (Unix-like Artifacts Collector) v3.0.0 released! 🌟 New features 🔎 New artifacts 👨‍💻 Thanks to all the contributors!!! Get it here: github.com/tclahr/uac#dfir #digitalforensics #cybersecurity #infosec

1

5

12

3

1.0K

H

Hiroshi Suzuki@herosi_t · Oct 23

#gccsec #seccamp

HHiroshi Suzuki@herosi_t · Oct 23

GCC 2025 TaiwanでC++マルウェアの解析に関する講義することになりました。 gcc.ac/#reverse-engin… 募集は以下のページでされています。興味のある学生さん、応募お待ちしております。 security-camp.or.jp/event/gcc_taiw…

0

2

1

326

H

Hiroshi Suzuki@herosi_t · Oct 23

GCC 2025 TaiwanでC++マルウェアの解析に関する講義することになりました。 gcc.ac/#reverse-engin… 募集は以下のページでされています。興味のある学生さん、応募お待ちしております。 security-camp.or.jp/event/gcc_taiw…

0

7

23

4

2.0K

Hiroshi Suzuki Retweeted

堂

堂前@IIJ@IIJ_doumae · Sep 4

サイバーセキュリティの世界でトップクラスのカンファレンスBlack Hat USA 2024にIIJの高山が参加しました。高山はIIJチームが提供するトレーニングコースのサポートをしつつ、様々な発表も聴講しています。そのサマリがレポートされています、どれも面白そうです。 eng-blog.iij.ad.jp/archives/27540

1

25

88

20

9.0K

Hiroshi Suzuki Retweeted

T

Takahiro Haruyama@cci_forensics · Apr 23, 2021

Due to some missing links on the conference web pages, I uploaded my conference talk pdfs for 10 years. Time flies. speakerdeck.com/takahiro_haruy…

1

28

105

30

0

H

Hiroshi Suzuki@herosi_t · May 20, 2024

Early pricing for our #BHUSA course ends this Friday. To save $300, join our DFIR course now! blackhat.com/us-24/training…

HHiroshi Suzuki@herosi_t · May 13, 2024

Our #BHUSA DFIR course will attack Win11 23H2 and Server 2022 with in-the-wild malware/attack tools. Then, we will analyze them to discover what evidence the attack tools remain, which means you can learn both attack and defense. Join our course: blackhat.com/us-24/training…

0

1

2

1

5.0K

H

Hiroshi Suzuki@herosi_t · May 13, 2024

Our #BHUSA DFIR course will attack Win11 23H2 and Server 2022 with in-the-wild malware/attack tools. Then, we will analyze them to discover what evidence the attack tools remain, which means you can learn both attack and defense. Join our course: blackhat.com/us-24/training…

herosi_t's tweet image. Our #BHUSA DFIR course will attack Win11 23H2 and Server 2022 with in-the-wild malware/attack tools. Then, we will analyze them to discover what evidence the attack tools remain, which means you can learn both attack and defense. Join our course: blackhat.com/us-24/training…

0

11

15

8

12.0K

Hiroshi Suzuki Retweeted

C

Chad Tilbury@chadtilbury · Mar 13, 2024

Google Chrome Platform Notifications Database analysis with the new @ArsenalRecon LevelDB parser sans.org/blog/google-ch…

1

12

32

8

4.0K

Hiroshi Suzuki Retweeted

m

moto_sato@58_158_177_102 · Mar 12, 2024

related to this APT case virusbulletin.com/conference/vb2…

0

2

0

1.0K

Hiroshi Suzuki Retweeted

m

moto_sato@58_158_177_102 · Mar 11, 2024

Visual Studio Code (VS Code) used by APT actor as a RAT tool case report. Our research member's presentation material at JSAC2024 is available now. jsac.jpcert.or.jp/archive/2024/p…

2

15

53

11

8.0K

H

Hiroshi Suzuki@herosi_t · Mar 11, 2024

I wrote a script to convert Cisco MZIP format firmware into ELF. It might help checking manipulated firmware by attackers. Enjoy! github.com/herosi/mzip2elf

herosi_t's tweet card. Contribute to herosi/mzip2elf development by creating an account on GitHub.

0

14

35

13

8.0K

Hiroshi Suzuki Retweeted

T

Takahiro Haruyama@cci_forensics · Nov 1, 2023

The tool, result and exploit PoCs github.com/TakahiroHaruya… Intel didn't assign the CVE number for stdcdrv64.sys but told us the driver was fixed.

2

22

79

30

12.0K