Satoshi Tanda
Founder at System Programming Lab Ltd
Vancouver, British Columbia, Canada
Summary
🤩
Rockstar🎓
Top SchoolSatoshi Tanda is a founder and security engineer with 12+ years of hands-on experience in Windows internals, firmware and virtualization, and over 15 years working with low-level security software. He has led UEFI and PowerShell-feature development at CrowdStrike and now focuses on console security and virtualization at Sony Interactive Entertainment while running his own training and tooling venture. A prolific open-source author, Satoshi created multiple hypervisors and contributed Windows integration fixes to the widely used Capstone disassembly framework, demonstrating deep expertise in Rust, modern C++, and x86/x64 assembly. His work blends vulnerability research, reverse engineering of exploits and malware, and kernel/driver-level engineering (including EPT-based techniques), making him a rare practitioner comfortable from UEFI to hypervisor-level code. Based in Vancouver, he pairs practitioner-level teaching with production security engineering and has a track record of shipping hard-to-build, low-level features across Windows and Mac platforms.
12 years of coding experience
16 years of employment as a software developer
Bachelor's Degree Arts in Economics, Bachelor's Degree Arts in Economics at Takushoku University
English, Japanese
Stackoverflow
31reputation
25kreached
2answers
0questions
Github Skills (29)
platformio10
assembly10
c-language10
dis10
platform-sdk10
hyper-v10
memory-management10
x8610
kernel10
hyper10
hypervisor10
driver10
x86-6410
kernel-mode10
disassembly10
Programming languages (10)
Github contributions (5)
tandasat/HyperPlatform
Feb 2016 - Jul 2022
Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:1 release, 238 commits, 7 PRs in 6 years 6 months
Contributions summary:Satoshi primarily contributed to the core functionality of the hypervisor platform. Their work involved the implementation of EPT (Extended Page Tables) functions, including table construction and memory management, which is essential for the hypervisor's operation. The commits reflect efforts in addressing issues, adding diagnostic code for EPT misconfiguration, and managing low-level memory operations critical to the platform's stability. The user also focused on implementing features related to performance measurement and extended processor state handling.
driverwindows-kernelwindowsesxihyper-v
tandasat/DdiMon
Mar 2016 - Jan 2022
Monitoring and controlling kernel API calls with stealth hook using EPT
Role in this project:Backend Developer
Backend DeveloperContributions:49 commits, 29 pushes, 2 branches in 5 years 10 months
Contributions summary:Satoshi focused on implementing and debugging core functionalities related to monitoring and controlling kernel API calls. The commits demonstrate workarounds for identified issues within the stealth hook mechanism. Code changes included modifications to the shadow breakpoint functionality and core DdiMon logic to improve the monitoring process, including better logging.
kernelapicallscontrollingept
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.