Most of what I build lives inside employer detection pipelines and isn't mine to publish. This page is where personal tooling, regex/YARA experiments, and small scripts will land as I clean them up for public release — live-pulled from github.com/KrasimirSec.

• ›Public regex/YARA signature snippets for common obfuscation patterns.
• ›Small deobfuscation and triage utilities for PHP/JS malware samples.
• ›Write-ups on this site linking research to the tooling that produced it.