I like understanding how low-level technologies work and how they are used for platform security. I also enjoy building, breaking, and teaching these kinds of things. Check out my training class on them if you are interested: http://tandasat.github.io

System Programming Lab

Source: https://tandasat.github.io/

Our Training

Our next publicHypervisor Development classis:

• Date: Oct 12 - 15, 2026 (4 days)
• Time: 8am - 4pm (PDT/UTC-7)
• Format: Remote
• Register atRegFox

If you want to receive future class schedule announcements, subscribe toour mailing listby sending an empty email to[email protected].

For further inquiries, contact me at:email,LinkedIn,X,Mastdon, orBluesky.

We also offer a private class with a minimum of 8 people. Please contact me to discuss further details.

About the Trainer

Satoshi is a system software engineer and security researcher with over 15+ years of experience. He works on virtualization for game console and previously worked as a developer, researcher, and reverse engineer at security software vendors.

He enjoys developing and reverse-engineering system software and teaching low-level technologies. His strong interest in platform security led him to study virtualization technologies and write research hypervisors since early 2009 (there was even no EPT at the time!). He open-sourceshypervisorsforresearchers, detailsapplicationsandprogressionof virtualization technologies, and discoversvulnerabilitiesin hypervisorsandotherprivileged software. He has taught the class for over a hundred professionals online as well as at reputable security conferences such asOffensiveCon,Recon, andHexacon.

cr3ghost (@cr3ghost): Satoshi Tanda found bugs in Microsoft’s own Hyper-V hypervisor and HVCI implementation as a by-product of learning how they work. Let that sink in.

His blog covers Intel VT-rp (the hardware defense Intel built to counter EPT-based hooking), kernel shadow stacks, SMM isolation,