My journey in cybersecurity began with an unexpected detour. As a young officer at the U.S. Air Force Academy, a side project in email spoofing opened the door to a new mission. I soon became a founding member of the Air Force’s first cyber warfare unit, the 609 Information Warfare Squadron. Over the last two decades, I’ve led teams investigating nation-state attacks and unraveling complex cybercrimes across military, government, and industry settings - hands-on experience in digital forensics and incident response that built the technical foundation I rely on every day. → Leading Innovation at SANS Institute: Fast forward to today: I lead as an executive in the SANS Institute as Chief of Research. I drive the development of cutting-edge thought leadership and research initiatives that keep our global community prepared for whatever comes next. I’m honored to be known as the Godfather of DFIR (Digital Forensics and Incident Response), a nickname earned through years of pioneering work in the field. But what matters more to me is being a mentor. From training 1,000s of professionals to co-authoring renowned courses in Windows forensics and advanced threat hunting, I take pride in helping shape the next generation of cybersecurity experts. I believe in empowering teams to innovate and share knowledge openly to elevate our entire industry. → Thought Leadership on AI and Emerging Threats: I’ve always balanced deep technical expertise with a big-picture perspective on where security is headed. With over 20 years of experience in forensics, threat hunting, intrusion detection, and offensive ops, I’ve seen the threat landscape evolve – and I’ve evolved with it. These days, I’m especially fascinated by emerging threats and new frontiers like artificial intelligence and quantum computing. At SANS, I spearhead research on how AI intersects with cybersecurity, and how we can stay ahead of increasingly sophisticated attacks. I regularly brief and advise U.S. government agencies and Fortune 500 companies on security strategy, translating complex technical issues into actionable insights for leaders. Whether I’m contributing thought pieces to industry publications or speaking at conferences like RSA, my goal is to demystify cybersecurity for others. I love turning cutting-edge findings into clear guidance, so that organizations can defend themselves more effectively in an increasingly complex threat landscape.
