Sebastian Eschweiler

Full Decryption of Systems Encrypted by Petya/NotPetya
Decrypting NotPetya/Petya: Tools for Recovering Your MFT After an Attack