Contributor
Yanky Wilson is a cybersecurity analyst focused on malware reverse engineering and threat intelligence. When a sample lands, he tears it down — static analysis, protocol decode, config extraction — and works the infrastructure and tradecraft back to whoever’s behind it: Mapping TTPs to MITRE ATT&CK, pivoting infrastructure into clusters and tying those clusters to known threat actors. From there, he turns the analysis into deployable detections — YARA, Sigma, Suricata, KQL.
He also runs incident response for an MSP, owning the full lifecycle from initial alert through containment and post-incident reporting — work that keeps his research grounded in real intrusions rather than lab samples. His published research lives on GitHub:
github.com/yankywilson
ContributorYanky Wilson is a cybersecurity analyst focused on malware reverse engineering and threat intelligence. When a sample lands, he tears it down — static analysis, protocol decode, config extraction — and works the infrastructure and tradecraft back to whoever’s behind it: Mapping TTPs to MITRE ATT&CK, pivoting infrastructure into clusters and tying those clusters to known threat actors. From there, he turns the analysis into deployable detections — YARA, Sigma, Suricata, KQL.
