About#

Hey,

Freelance DFIR Consultant with 5+ years of experience responding to real-world intrusions across the world.

Previously at Airbus Protect, leading IR investigations on hosts, networks, storage, and cloud environments (AWS, Azure, GCP) for clients in Media, Government, European Institutions, Defense…

🏅 GIAC Cloud Forensics Responder (GCFR) — 2024

What I do#

  • Threat Hunting & proactive threat assessments
  • Incident Response — host, network, cloud (AWS, Azure, GCP), storage
  • Digital forensics & deep artifact analysis (→ see my research)
  • Remediation planning & executive reporting
  • EDR/SIEM architecture & integration

Currently available for missions#

  • SOC L3 & Lead
  • DFIR retainer
  • IR on-demand
  • Help to create IR Services at orgs

Feel free to contact me on LinkedIn.