Hidden Windows: The Undocumented Native API 🇺🇸

We are honored to welcome Pavel Yosifovich, a world-renowned expert in Windows Internals, prolific author, and elite instructor with unparalleled expertise in systems programming.

Currently serving as Co-Founder of TrainSec Academy and Chief R&D Officer at CYMDALL, Pavel specializes in software development for the Windows platform, making extensive use of C++, .NET, Rust, and kernel APIs.

In addition to his time as a Principal Software Engineer at Microsoft, Pavel is the co-author of the legendary book “Windows Internals (7th Edition)” and author of “Windows Kernel Programming.” He has also created advanced courses for platforms such as Pluralsight and Pentester Academy.

In his talk, “Hidden Windows: The Undocumented Native API,” he will share deep technical insights, providing a detailed look at the “public” Win32 API versus the undocumented Native API (NtDll.dll), demonstrating how malware authors use techniques such as Direct Syscalls to bypass modern EDR and antivirus solutions.