Alfredo Andrés is a seasoned software engineer with over two decades of hands-on experience in security, malware analysis and systems-level development, currently building deception products at CounterCraft. He combines deep C/C++ expertise across UNIX and Windows internals (including ring0 drivers and hypervisor interactions with ESX/XEN) with practical automation and scalable service design from his long tenure at S21SEC LABS. An active contributor to security-focused open source—helping improve Drakvuf’s Windows binary analysis and enhancing the Yersinia layer‑2 attack framework—he brings pragmatic, performance-oriented fixes rather than theoretical overengineering. Comfortable across the full stack of low-level tooling, browser extensions and orchestration, he favors focused, best-effort solutions that accelerate automated malware analysis. Colleagues describe him as a strong team player who keeps learning after 20+ years in the field and balances engineering rigor with making work enjoyable for others.
Contributions:4 releases, 92 commits, 37 PRs in 4 years 1 month
Contributions summary:Alfredo primarily contributed to the Yersinia project by adding and modifying source code related to the framework's functionality. The changes include the addition of an autoconf macro to fix a macro issue, removal of debug comments, modifications to the pcap filter, code refactoring, and fixes for crashes. The commits suggest improvements to the code quality, fixing bugs, and enhancing the existing features.
Contributions:19 commits, 19 PRs, 163 comments in 2 years 10 months
Contributions summary:Alfredo primarily contributed to the Drakvuf project by fixing bugs and adding new functionalities related to the analysis of binary code, particularly within Windows environments. Their work included resolving issues with uninitialized variables, correcting process list traversal, and implementing routines for obtaining module base addresses. They also added several API functions focused on resolving full paths of Windows registry keys and parent process IDs, and incorporated a new plugin for monitoring Windows registry activities. The user's contributions extended to code optimization and enhancement of the Drakvuf API, increasing the overall effectiveness of the binary analysis tools.
binary-analysisboxanalysissandboxvirtualization
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial
Alfredo Andrés - Software Engineer at CounterCraft