Florian Roth
Frankfurt, Hesse, Germany
Summary
🤩
Rockstar
Top expert inCybersecurity Analytics and Threat Intelligence
Florian Roth is Vice President of Research and Development at Nextron Systems and a threat-research and detection-engineering leader with 12 years of professional experience based in Dietzenbach, Germany. He is the creator and maintainer behind widely used open-source tools and repositories—Sigma, THOR, LOKI, yarGen—and the author of over 16,000 YARA rules, with active contributions to the Sigma main repo and multiple scanners. Florian blends deep DFIR expertise with hands‑on engineering in Rust, Python and Go, turning research into production-grade detectors (including Log4Shell detection and APT simulation tooling). His work favors robustness and practical detail—everything from improving string extraction in yarGen to integrating multi-service hash checks and resilient scanner behavior. Off the clock he’s a green-tea‑drinking, sports‑car‑loving cat owner and outspoken free-market advocate.
13 years of coding experience
Github Skills (74)
python10
wp-api10
sia10
security10
process-monitoring10
malware10
code-auditing10
audit-logging10
http-requests10
ws-api10
yara10
linux10
threat-intelligence10
api10
http-request10
Programming languages (23)
Github contributions (5)
Neo23x0/Loki
Jan 2015 - Dec 2022
Loki - Simple IOC and YARA Scanner
Role in this project:
Security Engineer
Security EngineerContributions:69 releases, 917 commits, 80 PRs in 7 years 11 months
Contributions summary:Florian appears to have contributed to the improvement of an existing IOC scanner. The contributions primarily involve code modifications, especially to improve the scanning capabilities for specific malware. The user's work resulted in a more effective scanner.
scannerpythonyarahashdfir
Neo23x0/log4shell-detector
Dec 2021 - Feb 2022
Detector for Log4Shell exploitation attempts
Role in this project:Back-end Developer
Back-end DeveloperContributions:1 review, 113 commits, 41 PRs in 2 months
Contributions summary:Florian's contributions primarily involve developing a Log4Shell exploitation attempt detector. Their work includes creating the initial version of the detector, fixing bugs related to casing and other problems, and adding input error handling. Furthermore, they improved the tool by adding support for multiple paths and default paths, as well as adding *.gz file support, and a quick scan mode. The user also refactored the code and implemented various enhancements for improved robustness.
log4shellpowershellexploitationdetector
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.