Leads end-to-end forensic investigations and incident response engagements for ransomware, nation-state, and advanced threat incidents, including host/network forensics, malware triage, and threat hunting for clients. Core stack: EnCase/X-Ways/Velociraptor, Splunk, Wireshark, EDRs (CrowdStrike, SentinelOne, Defender), Python/PowerShell scripting.
Sign in to see your match