Matt Hand
Head Of Product at Origin
United States
Summary
🤩
RockstarMatt Hand is a Head of Endpoint Protection with 11 years of hands-on experience converting offensive tradecraft into resilient defensive controls across highly defended environments. A former red team operator and course architect, he has led and built teams at startups and consultancies to tackle real-world Windows-centric threats and post-exploitation techniques. He founded endpoint programs focused on “semantic security,” bringing research-driven detection and prevention to modern endpoints. His open-source work on OffensiveCSharp and DefenderCheck reflects deep Windows internals knowledge and a practical focus on detection-evasion and signature analysis. Known for turning offensive findings into concrete protection features, he balances adversary mindset with product-forward engineering. Based in the United States, he blends operator instincts with program leadership to harden endpoints where threats are novel by default.
11 years of coding experience
6 years of employment as a software developer
Github Skills (22)
security10
security-testing10
eval10
dotnet-core10
offensive-security10
csharp10
security-scan10
windows-nt10
filesystem9
netframework9
cryptography9
fileio9
file-access9
file-handling9
file-processing9
Programming languages (9)
Github contributions (5)
matterpreter/OffensiveCSharp
Feb 2019 - Oct 2022
Collection of Offensive C# Tooling
Role in this project:
Security Engineer
Security EngineerContributions:86 commits, 13 PRs, 31 pushes in 3 years 9 months
Contributions summary:Matt has been contributing offensive C# tooling. Their work focuses on developing tools to find and exploit vulnerabilities within Windows environments. Their contributions include tools for identifying abandoned COM keys, credential phishing, GPS coordinate collection, session file enumeration, and an SSP implant, demonstrating a strong understanding of Windows internals and offensive security techniques. Additionally, they created tools for encrypted zip archives and file analysis tools.
csharp
matterpreter/DefenderCheck
Apr 2019 - Oct 2022
Identifies the bytes that Microsoft Defender flags on.
Role in this project:Security Engineer
Security EngineerContributions:34 commits, 7 PRs, 16 pushes in 3 years 6 months
Contributions summary:Matt primarily contributed to developing a tool to identify bytes that Microsoft Defender flags. Their contributions focused on implementing a C# program that interacts with Windows Defender's command-line interface to scan files and determine their detection status. They implemented logic to iteratively narrow down the problematic bytes within a file and added features to disable Defender features and extract signature information. The user's work demonstrates a focus on security research and evasion techniques.
defenderflagsblue-teamcsharpmicrosoft
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.