Let’s talk

UK Water Utility

Teach the reasoning behind the investigation

Onboard six SOC colleagues and strengthen investigation practice

I delivered sessions on AiTM investigation and identifying the origin of traffic behind NAT. Supporting knowledge material covered email authentication, the significance of hosting IP addresses and Pass-the-Ticket investigation. These topics connect security signals to the context needed to interpret them.

SOC leadershipAnalyst coachingSOC recruitment & onboardingInvestigation quality assuranceAdversary-in-the-Middle (AiTM)Network traffic analysisEmail authenticationOperational handover
Return to the full story ←

Your exploration

Viewed history

Saved only in this browser.

Ask my portfolio

Ask about my work.

Ask about an investigation, a technology or my contribution. Answers link to the relevant case and technical detail.

Every answer links to the work.
How this works

When AI is connected, your question, recent questions and relevant published pages are sent to MiniMax to select supporting passages. Otherwise, this searches the site directly. Answers quote the saved website and link to their sources. This website does not save chat transcripts. Clearing or leaving the page clears this conversation.