Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection
Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap
Performs memory forensics analysis using Volatility 3 to extract evidence
Conducts penetration testing of iOS and Android mobile applications
Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen
Responds to phishing incidents by analyzing reported emails, extracting
Facilitate structured post-incident reviews to identify root causes,
Plan and execute authorized vishing (voice phishing) pretext calls to
Conducts authorized wireless network penetration tests to assess the
Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered
Configures host-based intrusion detection systems (HIDS) to monitor
Hardware Security Modules (HSMs) are tamper-resistant physical devices
Harden LDAP directory services against common attacks including credential
Configure microsegmentation policies to enforce least-privilege workload-to-workload
Deploy Cisco Duo multi-factor authentication across enterprise applications,
Configure secure OAuth 2.0 authorization flows including Authorization
Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic
Deploys and configures Suricata IDS/IPS with Emerging Threats rulesets,
Configures Microsoft Defender for Endpoint (MDE) advanced protection
Executes containment strategies to stop active adversary operations
Correlates security events in IBM QRadar SIEM using AQL (Ariel Query