Skip to content
View DDMetoyer's full-sized avatar

Block or report DDMetoyer

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
DDmetoyer/README.md

Devante Metoyer

Application Security & Cyber Engineering · Dallas, TX

Application security engineer with 8+ years in IT, finishing a B.A.S. in Cyber Operations (Cyber Engineering). Previously an AppSec engineer at Miami University and an independent security contractor. I like understanding systems from the bottom up, so I build and break them: OS kernel internals in C, network clients in raw x86 assembly, Python security tooling, and malware and software supply-chain analysis.

Focus: secure code review · threat modeling · cloud security (AWS / Azure / GCP) · infrastructure as code (Terraform, AWS CDK) · Cedar policy-as-code · IAM · detection engineering

Featured work

Project What it is
os-kernel-design-notes Design notes from a four-layer OS kernel I built in C: preemptive priority scheduler, mailbox IPC, user/kernel syscall boundary, device drivers with FCFS/SSTF/SCAN/C-SCAN disk scheduling
Software-Supply-Chain-Malware-Analysis Static and dynamic analysis of malicious npm packages, Windows malware, Linux ransomware and the Mirai IoT botnet, mapped to MITRE ATT&CK with detection recommendations
python-security-toolkit Nine command-line tools for forensic triage, IOC carving, EXIF geolocation, web recon, raw-socket sniffing, LSB steganography and VirusTotal hash lookups
iot-smart-home-security Research on how insecure smart-home devices create physical-safety risk, and a defense-in-depth model from hardware root of trust to user behavior
offensive-security-assessments Full-chain red-team report on a simulated water utility (OSINT → Nmap/ZAP → command and SQL injection → credential access), plus WiFi and protocol security write-ups
dfir-threat-intel APT28 threat-intelligence report with an Analysis of Competing Hypotheses, and a Volatility workflow for hunting process injection in memory

Toolbox

Languages: C · Python · x86 assembly · Bash · PowerShell · Java Security: Burp Suite · OWASP ZAP · Nmap · Metasploit · Wireshark · Volatility · IDA Pro · Maltego Cloud & IaC: AWS · Azure · GCP · Terraform · AWS CDK · Cedar

Certifications: CompTIA Security+

Connect

LinkedIn · GitHub

Pinned Loading

  1. dfir-threat-intel dfir-threat-intel Public

    APT28 threat-intelligence report with an Analysis of Competing Hypotheses, and a Volatility workflow for hunting process injection in Windows memory

  2. iot-smart-home-security iot-smart-home-security Public

    Research on how insecure smart-home IoT devices create physical-safety risk, with a defense-in-depth model from hardware root of trust to user behavior

  3. offensive-security-assessments offensive-security-assessments Public

    Red-team report on a simulated water utility (OSINT, Nmap/ZAP, command and SQL injection, credential access) plus WiFi and network protocol security write-ups

  4. os-kernel-design-notes os-kernel-design-notes Public

    Design notes from a four-layer OS kernel in C: priority scheduler, mailbox IPC, syscall boundary, device drivers and disk scheduling

  5. python-security-toolkit python-security-toolkit Public

    Nine Python CLI tools for forensic triage, IOC carving, EXIF geolocation, web recon, packet sniffing, LSB steganography and VirusTotal lookups

    Python

  6. Software-Supply-Chain-Malware-Analysis Software-Supply-Chain-Malware-Analysis Public

    Static and dynamic analysis of malicious npm packages, Windows malware, Linux ransomware and the Mirai IoT botnet, mapped to MITRE ATT&CK