Founding team member, VP of Engineering and Chief Architect @ Carbon Black, contributor to ATT&CK framework and osquery, believer in open source security capabilities, and Windows Internals geek.
In-Memory Persistence: Terminate & Stay Resident Redux