THOROUGHLY exceeded my sky-high expectations.

I came into the class feeling underprepared. I had no clue what LFH, FEA or BEA stood for, let alone what they did. In part, this was due to a lack of online resources for understanding the Windows Heap. The ones that did exist were either intimidating whitepapers, or very old guides. That’s not to say they weren’t good. In fact, Peter Van Eeckhoutte has written some great free resources. However, I knew I couldn’t get a good understanding of the Windows Heap solely relying on them, so I signed up for Peter’s class with VERY high hopes – that somehow, in a mere 4 days, he could teach me the Windows Heap up to a point where I could continue on my own.

Peter not only met my expectations, he THOROUGHLY exceeded them.

Peter is the rarest kind of teacher I’ve met: Someone with world-class expertise, a great knack for teaching, yet still down-to-earth. In REALTIME, I felt myself going from “What IS the LFH?” to “This makes so much sense!”; the whole time, realizing that reaching this level on my own, would have taken YEARS.

Not only is Peter sharp – he answered any questions I had without missing a beat, he’s also transparent in sharing the mistakes he made during his own research so WE could avoid them. In a world where complex findings are often presented as effortless, learning that Peter’s expertise did not stem from natural-born talent, but rather solitary persistence over 15+ years was a breath of fresh air.

I learned what subsystems make up the Windows Heap Manager, how they work, and what attacks I could perform on Win7 up to the latest build of Win11. More importantly, I learned a GENERIC methodology to use when doing my own research in future Windows versions. Peter admits that by teaching this, he risks losing repeat business. When I asked why he chose to do so, he said he prioritizes his students’ understanding over how much money he can make.

Of course, finishing the live training is just the tip of the iceberg. Post-course, I’m “blessed” with TWO years’ worth of homework to hone the skills I’ve learned. I also have access to a private Slack channel, where I can ask Peter and fellow Corelan Alumni any questions.

Despite Peter’s legendary reputation, I feel his courses are underrated. I think this is because he spends most of his time improving his courses instead of marketing them. I hope this short post I’ve written can illuminate WHY his courses are so good, and help readers decide if the training is right for them.