At Elbit Systems, I developed a high-performance Endpoint Detection and Response system with real-time monitoring through kernel-mode drivers. It detected and mitigated advanced threats, including ransomware.
I designed API hooking and injection mechanisms for behavioral analysis and malware detection, and implemented USB monitoring to identify malicious HID devices and prevent unauthorized scripts.
Earlier, I developed cross-platform infrastructure for Control-M Agent at BMC Software and automation tools at NICE Systems. At Marvell Semiconductor Ltd. (DSPC), I developed and maintained USB kernel drivers that achieved Microsoft certification (WHQL).

