Brian Wallace is a security researcher at Cylance with experience in softwareengineering, reverse engineering, malware analysis, vulnerability research,cryptography, and more. As the primary researcher responsible for exposing thethreat actor behind Operation Cleaver, he also has experience as a threatactor investigator. Brian additionally works on non-traditional methods todissuade threat actors from their targets. He regularly builds tools to solveproblems and automate solutions, which are commonly published as open sourcetools. One of these tools, bamfdetect, statically identifies botnet malwaresamples, and attempts to extract their configuration details from them,allowing for quick and clean identification of command and control servers.