Host-based and network-based forensics, cyber incident response, cyber-criminal investigations, intrusion detection/analysis, and designing countermeasures and mitigations for programming language weaknesses and vulnerabilities. Software vulnerability research and exploit development, including exploits, shellcode, and bypass techniques for mitigations such as NX (nonexecutable stack), ASLR, and advanced exploit protections.