Leverage query-based techniques through advanced EDR technologies to proactively identify and mitigate potential cybersecurity threats.

Analyze digital forensic artifacts such as registry hives, event logs, file system data, internet history, memory data, etc.

Conduct thorough and detailed digital forensic investigations aiming to uncover valuable insights and discern patterns that would help determine the threat actors' timeline of events.

Employ industry best practices to gather and analyze evidence, ensuring the integrity of investigations.

Develop and deliver customized tabletop training exercises tailored for individual clients.

Demonstrated proficiency in generating Return on Investment (ROI) graphs, effectively illustrating the security posture improvements of projects or investments based on client goals to increase their security posture in alignment with NIST CSF.

Utilized my analytical skills to develop cost vs. effort graphs, providing valuable insights into resource allocation and optimization.

Honed my executive-level presentation skills, developing and delivering impactful presentations to senior management, ensuring clear understanding and support for security initiatives and effectively communicating potential risks and mitigation strategies to stakeholders.

Managed and executed multiple phishing campaigns for global clients with upwards of 20,000 employees, overseeing the entire process from user group creation to campaign configuration, launch, monitoring, and analysis of results for comprehensive reporting.

Thorough analysis of various types of malware using basic static and dynamic analysis techniques followed by advanced static and dynamic analysis techniques.

Analysis tools used included terminal window programs, network activity monitoring, and assembly code analysis and debugging.

Anti-disassembly and anti-debugging techniques were introduced and briefly studied.

Collaborative effort with another student to analyze memory images of Windows and Linux machines.

Identifying evidence and combining findings to determine different types of breaches and attacks that occurred on the machines.

Using knowledge from the course to give a reasonable sequence of events for the attacks discovered.