Michael Gough

146 Followers

Blue Team leader, Incident Response focused, Log Management, Security operations and Architecture. I love to defend and deal with incidents! I am a long time seasoned computer security specialist for Fortune 500 accounts helping in Security Architecture, Security Process, Incident Responce, Malware Discovery, Auditing and Assessments as well as security solutions creation. I am a principal for BSides Texas and lead for BSides Austin Information Security conference. BSides provides information security education for the IT and Information Security industry. My interests also include Virtual Visitation, the use of Video Conferencing for divorced and separated families. These activit...

log-md malware archaeology malware incident response infosec blue team active defense logging malwarearchaeology.com windows logging cheat sheet detection and response information security log-md.com ransomware malwarearchaeology hacker hurricane security hackerhurricane hacking windows logs detection threat hunting powershell defense forensics log management email sandbox breach malware discovery ir auditing apt logs splunk malware management file-md cheat sheets windows logging picerl response soc secops memory att&ck wmi dfir credit freeze fraud credit card pen testing siem bsides credentials epp next gen av edr malware analysis apple archaeology malwarediscovery registry cheat sheet top10 hack houseccon

Präsentationen
Dokumente
Infografiken

Aktuellste Beliebteste SlideShares

Michael Gough

All These Sophisticated Attacks, Can We Really Detect Them - PDF

Incident Response Fails

When Security Tools Fail You

You need a PROcess to catch running processes and their modules_v2.0

Windows Incident Response is hard, but doesn't have to be

Introducing ArTHIR - ATT&CK Remote Threat Hunting Incident Response Windows tool

MITRE AttACK framework it is time you took notice_v1.0

Detecting WMI Exploitation v1.1

MW_Arch Fastest_way_to_hunt_on_Windows_v1.01

You can detect PowerShell attacks

BSidesOK_You_CAN_detect_PowerShell_attacks_v1.1

Cred stealing emails bsides austin_2018 v1.0

InnoTech 2017_Defend_Against_Ransomware 3.0

EDR, ETDR, Next Gen AV is all the rage, so why am I ENRAGED?

Email keeps getting us pwned - Avoiding Ransomware and malware

Email keeps getting us pwned v1.1

Windows IR made easier and faster v1.0

DIR ISF - Email keeps getting us pwned v1.1

Email keeps getting us pwned v1.0

Sandbox vs manual analysis v2.1