Security architect and researcher with experience in cybersecurity starting at thirteen. 20ish years experience, 60+ certifications, and co-found of H & A

Illinois, USA
Joined September 2011
And so it begins. The initial release of @reflexsoar is available to install. Follow our quickstart video to get it up and running. youtu.be/6c1jsexKVrU
So you've been waiting to get your hands on ReflexSOAR? We are putting some finishing touches on documentation, setup and last minute bug fixes but SOOOON! (tomorrow 5/2)
6
1
12
Replying to @reflexsoar
@reflexsoar has its own Reflex Query Language (RQL), useful for automating alert triage, intel list lookups, de-obfuscation, auto case merging, auto dismissals, and more. Check it out below. youtu.be/cuRpo8O9FTQ #ReflexSOAR open-source is being released on May 2
1
4
Learn about the @ReflexSOAR event queue. An easy, intuitive interface for analysts to review alerts. youtu.be/DoDsVBkb1Wk #ReflexSOAR open-source will be released on May 2, 2022.
9
1
11
Alert queues are often full of the same events over and over. Check out this video to see how @reflexsoar deduplicates events to simply alert triage. youtu.be/hMxDxqoY7lc ReflexSOAR official release date 5/2/2022
Started a series on making alert investigations more efficient with @reflexsoar . This first video walks through the process of bringing alerts or events in via inputs. The next video will demonstrate how to deduplicate alerts to help with too many alerts youtu.be/4lDOOxP_-fM
Here's the recording on using open-source tooling to help solve alerting and triage challenges. Many of the topics discussed apply to any solution from case management to SOAR as well as from open-source to commercial. youtu.be/yxgsyqdyRMg
Join @Awalt86, @n3tsurge, and me for an open discussion on the challenges of SOC triage and investigations as well as see a sneak peek of the new open-source @reflexsoar coming out. The live stream is Friday at 12:00 PM CST. Register here: teams.microsoft.com/registra…
1
8
Join @Awalt86, @n3tsurge, and me for an open discussion on the challenges of SOC triage and investigations as well as see a sneak peek of the new open-source @reflexsoar coming out. The live stream is Friday at 12:00 PM CST. Register here: teams.microsoft.com/registra…
What do you do when you are not defending? I spend time with my crazy animals.
What do security experts do when they aren't defending against bad guys? Tag an #AllAroundDefender & share a photo w/ non-cyber hobbies #StoriesBehindPeople @SecurityMapper @SecHubb @cfragoso @Seifreed @meeas @jorgeorchilles @John_Fokker @techieStef @lostinsecurity @jcjohnson34
2
2
9