A skill, applied

Velociraptor

I used Velociraptor to extend host investigation on systems reached through malicious VPN sessions after correlating account access with internal network activity.

Experience at Growing MSSP with Offensive Services

Growing MSSP with Offensive Services

Two compromised VPN accounts. One exposed file share.

Network & Identity Incident Response

I traced suspicious NTLM logons through months of VPN history, scoped two compromised accounts and identified unauthenticated access to a sensitive share.

Read the story

Velociraptor

Two compromised VPN accounts. One exposed file share.

Viewed history

Ask about my work.