Lovepreet Singh Gill · Cybersecurity & Research

Understand the system. Follow the evidence.

I build security tools, investigate system behavior, and write about what I learn along the way.

View my work Explore writing

Security toolingTools that make investigation clearer.

Reverse engineeringUnderstanding systems from the inside.

Runtime analysisFollowing execution back to evidence.

Technical writingSharing the process and the lessons.

Featured projects.

Security Tooling

TraceWeaver

An evidence-first reverse-engineering research system connecting runtime observations to static-code locations.

Rust
Frida
Python
Ghidra

Inside the project

Target
authorized binaryFrida
bounded capturetw-ingest
validation

tw-core evidence · identity · trace bundle

CLI
inspect / replay / exportGhidra
verified static mapping

Documented evidence pipeline · schematic

Active Directory + Wazuh Lab

Detection Engineering

An independent Windows security monitoring lab for correlating authentication and PowerShell activity with Wazuh and Sysmon telemetry.

Windows Server
Active Directory
Wazuh
Sysmon

Read project overview

From the notebook.

Articles are on their way.

Notes on security tooling, systems, and lessons from the workbench will live here.

Follow along with RSS