Joe Sylve
Head Of Computer Forensic Research at Louisiana State University
New Orleans, Louisiana, United States
Summary
🤩
Rockstar🎓
Top SchoolJoe Sylve is a digital forensics and security leader with 13 years of experience, currently heading Computer Forensic Research at Cellebrite while teaching as an adjunct professor at the University of New Orleans and LSU. He holds a PhD in Computer Science and is GIAC-certified, with deep technical expertise in memory analysis, reverse engineering, OS internals, and incident response. Joe is the author and maintainer of influential open-source tools—most notably LiME, the first tool to enable full physical memory acquisition from Android devices—and has contributed key fixes to widely used projects like The Sleuth Kit. His career blends hands-on research and product leadership across BlackBag and 504ENSICS Labs, plus a track record of peer-reviewed publications. Based in New Orleans, he also co-organizes local security communities (NOLASec and BSidesNOLA), demonstrating a commitment to building talent and awareness beyond his research work.
14 years of coding experience
8 years of employment as a software developer
Bachelor of Science (BS), Computer Science, Bachelor of Science (BS), Computer Science at University of New Orleans
English
Github Skills (13)
c1710
memory-management10
kernel10
kernel-module10
c1110
linux-kernel10
ntfs10
tcp9
ip9
incident-response8
debugging8
cprogramming-language7
c-language7
Programming languages (14)
Github contributions (5)
jtsylve/LiME
Sep 2014 - Nov 2018
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:8 releases, 3 reviews, 33 commits in 4 years 2 months
Contributions summary:Joe primarily contributed to the Linux memory acquisition tool "LiME" by fixing bugs, improving compatibility with newer kernel versions, and adding new functionalities. Their work included addressing compilation issues for different kernel versions, enhancing TCP compatibility, and implementing features like the "localhostonly" flag for TCP connections. The user also added a timeout feature for writing memory pages and introduced optimizations to retry interrupted system calls.
androidfilesystemkernelkernel-modulelinux
sleuthkit/sleuthkit
Aug 2016 - Mar 2019
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Role in this project:Back-end Developer
Back-end DeveloperContributions:55 commits, 13 PRs, 33 comments in 2 years 7 months
Contributions summary:Joe primarily worked on improving the Sleuth Kit's NTFS file system analysis capabilities. Their contributions focused on correcting an issue related to MFT update sequence entries, defining a constant for the NTFS update sequence stride, and fixing a compile error on Windows. These changes involved modifications to the `ntfs.c` and `ntfs_dent.cpp` files. The user also fixed an issue with HFS+ catalog record reading.
command-linecommand-line-toolfilesystemsleuthkittct
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.