Speeches

• You’ve got Mail (and Misdirected Funds): A live demo of email hacking — CypherCon 2023 (2023-03-31)
  A live demo of financial crime committed via email hacking.

Presentations

• Easy Playbooks to Make Ransomware Criminals Cry — Blue Team Con 2022 (2022-08-28)
  An introduction to basic ransomware operator tactics to defend against, including attack vectors, prevention, and response.
• The Wild West of Shift Left: Your New Vulnerability Management Posse — Deep608 Conference 2024 (2024-03-29)
  It can be a very tough navigating all the acronyms and product categories involved in appsec, but it's definitely possible to find a good combination of tools that work together to improve your security posture!

Papers

• A New Needle and Haystack: Detecting DNS over HTTPS Usage — SANS Reading Room (2019-09-10)
  Encrypted DNS technologies such as DNS over HTTPS (DoH) give users new means to protect privacy while using the Internet. Organizations will face new obstacles for monitoring network traffic on their networks as users attempt to use encrypted DNS.
• Fight or Flight: Moving Small and Medium Businesses into the Cloud During a Major Incident — SANS Reading Room (2020-08-30)
  Incident responders often aid small and medium businesses (SMB) during crippling cyberattacks that cause outages of critical systems. This research examines the feasibility thereof and discusses the challenges that organizations may face with rapid cloud migration, including software compatibility and insurance requirements.

I am an IT professional with experience in security, auditing, development, system administration, and project management.

My professional experience is listed on LinkedIn.