Alyson Van Stone, Mba Email & Phone Number

• Performed full security audit for a recently compromised small business owner• Identified the attack, responded to the incident, and hardened systems to prevent future attacks• Explained technical security concepts and trained client on security awareness best practices• Conducted risk assessment and recommended control selections to reduce risk to an acceptable level• Planned, designed, and managed information security initiatives in support of confidentiality, integrity, and availability• Wrote technical documents and published cybersecurity content to educate users of social media platforms and search engines

Digital Marketing & Content Creation Services | We Help Small Businesses Make Big WavesSERVICES:• Providing general business management and marketing services to small business clients and entrepreneurs across a variety of industries• Creating digital marketing strategies and executing content marketing, search engine optimization (SEO), search engine marketing (SEM/Google Ads), email marketing (Mailchimp, Kartra), social media marketing (Facebook, Instagram, TikTok, Clubhouse), online advertising (social media & Google Ads), website optimization, influencer marketing, affiliate marketing and sales• Analyzing digital marketing campaigns using Google Analytics and social media analyticsRESULTS:• Wrote strategic plan to drive incremental revenue of $3.3M through integrated digital marketing campaigns and expansion into new channels• Developed new online revenue stream to add $144K per year in incremental, passive income• Completely revamped a client’s operations and administrative systems to save $58K a year and significantly reduce staff’s time spent on reporting and analytics• Grew Instagram account organically by over 1,000 targeted followers in 2 weeks, achieved 22% engagement rate

Pensacola, Fl, Us

• Prepared, executed, and reported on audit of NIST SP 800-53 cybersecurity controls that included interview, document review, and testing of systems to support compliance audit activities• Applied knowledge of NIST Cybersecurity Framework and how the Identify, Protect, Detect, Respond, and Recover categories comprise and facilitate an information security program• Quantitatively analyzed cybersecurity risk using NIST SP 800-30 to identify highest system risks• Executed threat modeling exercise to determine higher likelihood threat events• Developed information security policy to establish authorized access management and authenticator management for internal and third-party personnel• Ensured policy documents are aligned with business objectives, implementable by the organization, and practical for compliance • Incorporated operational perspective and constraints throughout policy purpose, scope, and authority

Threat Hunting• Conducted IoC research by downloading malware, identifying the indicators of compromise (IoCs) and the incident using Wireshark• Utilized ThreatConnect, a Threat Intelligence Platform (TIP), to research the Mimikatz exploitation tool• Created persistent malware using MSF, and hunted for its processesStatic Malware Analysis• Performed basic static malware analysis on a file and wrote a report on my investigation findings• Investigated dynamic-link library (DLL) files to identify functionality and potential malwareDynamic Malware Analysis• Executed malware in a Cuckoo sandbox environment• Analyzed file system changes, network activity, registry changes, utilized Sysinternals Autoruns tool, Process Explorer, Regshot, and Process Monitor (ProcMon) to investigate a malware sample and identify IoCs.• Created malware with MSFvenom and investigated it with dynamic investigation tools such as Netstat, online block list databases, FakeNet-NG and INetSimNetwork Forensics• Set up and reviewed data from a reverse proxy• Used Zeek, a network security monitor, to detect and investigate a DNS tunnel• Followed the following steps in malware investigation: 1. Checked for malware signatures, used an IDS, 2. Identified traffic abnormalities using Wireshark, 3. Identified key stations, 4. Filtered by IoCs and gathered data, 5. Analyzed the protocol dataMalware Defense & Persistence• Conducted an APT investigation and located persistent malware in a victim’s machine• Discovered an information leakage caused by a computer

Windows Dead Analysis:• Investigated a raw image file using PowerForensics and determined where an attack originated• Created a disk image and uncovered the original content from alternate data streams• Accessed and retrieved hidden data from an image file using file carving techniques with the Binwalk tool and a hex editorMemory Analysis• Inspected an image for IoCs (indictors of compromise) revealing the system was infected with WannaCry• Investigated processes using pslist and pstree, investigated network activity using connscan and socket, investigated DLLs using dlllist, kerberos.dll, and netlogon.dll and detected a code injection using malfindLinux Forensics• Created a forensics acquisition CD with static binaries and used it to extract information from a Linux OS• Investigated a server image and identified deleted and modified files• Mimicked bind shell behavior and conducted a live analysis of the /proc/ directory contentLog Analysis & Timeline• Searched for events in Windows Event Viewer to understand their structure• Examined the Event Viewer investigation process via SQL queries• Deleted and modified logs in Linux and Windows machines to mimic attack techniquesDFIR Simulation• Handled a “real-life” DFIR investigation scenario through a Capture the Flag (CTF) challenge

Introduction to DFIR:• Discovered evidence of programs executed upon startup using AutoRuns64• Recovered files from a suspicious USB drive and proved they were used to steal sensitive data, used HashMyFiles to verify match between leaked and suspected files, also used exiftool to examine metadata• Analyzed multiple attack scenarios in an organization, and recommended the best DFIR methodology to applyIncident Response Preparation:• Deployed Lansweeper to scan a network and identify, map, manage and protect assets• Created incident response plans for alerts including the four phases of preparation, identification, containment, and eradicationIncident Response Implementation:• Assigned priorities to incidents based on the methodology of function, information, and recovery (FIR)• Successfully contained a malicious program (that was spreading infection and controlled by an intruder) by air gapping the network and creating a sandbox environment in a FLARE virtual machineData Acquisition:• Created a drive capture using CAINE (Computer Aided Investigative Environment) Linux distribution for digital forensics• Created a disk image with FTK Imager and mounted it using OSFMount• Captured the RAM of a virtual machine (using FTK Imager) and acquired basic information about it using Volatility in a SIFT (Sans Investigative Forensics Toolkit) Workstation• Configured Windows 10 to create a memory dump during a system crashWindows Live Analysis:• Conducted a forensics review of web browser usage by examining the DNS cache• Identified USB connection history using NirSoft’s USBDeview tool• Investigated browser history using NirLauncher• Identified evidence within prefetch files that a deleted program was previously executed on a computer, using the WinPrefetchView tool• Looked for suspicious activity in the registry using regedit• Examined web history using NirSoft’s MyLastSearch

• Executed a variety of mock cyberattacks in a virtual lab environment, including social engineering, man-in-the-middle/on-path, brute-force, cryptographic, network, database, and application attacks• Conducted reconnaissance and bypassed defense systems• Enumerated organizations and exploited services and ports• Performed privilege escalation to become a system administrator• Seized control over websites, web platforms, and their host servers• Used advanced web application penetration techniques such as Cross-Site Scripting (XSS) and file inclusion, to discover and exploit vulnerabilities in cloud-based systems• Compromised a database with SQL injection• Conducted vulnerability scanning and wrote penetration testing reports with security defense recommendationsKey Tools used:Nmap, Hping3, Masscan, Arpspoof (dSniff), Bettercap, SSL Strip, John the Ripper, Rar2John, Hashcat, Common User Passwords Profiler (CUPP), Hydra, Medusa, Ncrack, SEToolkit, HiddenEye, WinRAR Self-Extracting Archive (SFX), Metasploit, Searchsploit, Reverse shells, Meterpreter, Bloodhound, HTTP servers Apache2 and Nginx, Burp Suite, SQLMap, OWASP Zed Attack Proxy (ZAP), Nikto, bWAPP (buggy web application)

• Set up a Python environment in Windows and Linux• Used and customized PyCharm as my IDE (Integrated Development Environment)• Executed nested loops• Created a range with various inputs in a loop• Built a calculator• Created a network client and server socket, built basic connectivity between the two• Wrote an ARP poisoning detector to detect On-Path (aka Man-In-The-Middle) attacks• Resolved errors in code using try and except statements

• Bypassed anti-virus software using file encryption techniques• Implemented endpoint detection and response (EDR) security suites• Created YARA rules to find malicious applications at endpoints• Updated a ClamAV virus database with the YARA rules and an allow-list• Installed a Modern Honey Network (MHN), configured a Dionea honeypot, simulated attacks on the honeypot• Configured a Valhalla honeypot to capture POP3 traffic• Demonstrated data loss prevention (DLP) techniques through regular expressions • Connected to a POP3 machine with Telnet and used POP3 commands to view messages• Established understanding of a log file’s flow, from creation to processing in a SIEM, to determining whether or not it classifies as an alert• Worked with Splunk as a SIEM service to monitor infrastructure• Configured Snort, an open-sourced Intrusion Detection System (IDS)/Intrusion Prevention System (IPS), on pfSense and monitored ICMP traffic with rules• Automated processes using Security, Orchestration, Automation, and Response (SOAR) for better incident management• Used Shodan to locate Industrial Control System (ICS) components• Designed a secure network architecture

• Utilized Cisco Packet Tracer to examine and troubleshoot network behavior and evaluated network security threat types• Configured security settings for a Cisco network switch and a Cisco ASA firewall• Created, deleted, and managed VLANs and Trunk lines• Configured Open VPN connections and TOR browser• Implemented Intrusion Prevention Systems (IPS), Intrusion Detection Systems (IDS) using Snort and Suricata

• Created and managed ownership of Linux files and folders• Executed common commands using the GUI and Terminal Emulator• Installed packages, software updates, and upgrades• Configured network settings using Linux commands• Identified and minimized network and workstation vulnerabilities• Wrote scripts to automate IP blocking and other system hardening techniques• Leveraged Linux System Service Management to implement features, services, and perform critical system tasks• Utilized the Bash default shell and scripting tool to automate repetitive tasks and functions• Established password and user policies to prevent data theft

• Established off-premise services in the cloud by setting up an AWS (Amazon Web Services) account with an Amazon EC2 (Elastic Compute Cloud) instance• Implemented AWS IAM (Identity Access Management)• Created a network in UniFi SDN and a virtual appliance• Used Amazon Security Groups and Amazon Inspector to secure data in the cloud

• Applied networking concepts including protocols such as TCP/IP, topologies, and network devices• Investigated network traffic using Wireshark and Nagios• Managed Cisco device configurations and system files• Executed port security commands on a Cisco switch• Configured SSH, configured and verified IPv6 addressing on a router• Configured IPv4 standard, default, summary and dynamic routes• Conducted troubleshooting on network issues using CDP, LLDP, Syslog, and NTP• Utilized the ACL (Access Control List) and configured firewall for network security• Set up a DHCP service on a Cisco router

• Managed, operated, and hardened a Microsoft domain environment (Windows 2016 Server) along with newer operating systems (Windows 10 Client and Windows 2019 Server)• Implemented configuration utilities in the Windows OS (both client and server)• Deployed a domain controller on the server with the Active Directory Domain Services role installed• Created users and groups and utilized the Group Policy tool to manage security• Performed a remote connection to a Windows machine using Remote Desktop protocol (RDP)• Executed Windows maintenance tasks such as updates and backups to support system health• Practiced DNSSEC in a Windows environment to protect against cyberattacks• Utilized BitLocker, User Access Control, and Windows Defender to strengthen defenses• Explored execution policy modes and bypass techniques• Wrote scripts using PowerShell to automate tasks from the command line

Began my cybersecurity experience by completing project #1 of over 250 for the year!Installed and configured Oracle VirtualBox to run virtual machines for further lab work.

Parsippany, New Jersey, Us

• Wrote strategic plan to achieve growth and profitability goals for Sales and Marketing • Managed cross-functional teams including Finance, R&D, and Operations to align on corporate strategic objectives • Extracted key consumer and customer insights from vast amounts of data and a variety of research sources to make fact-based decisions • Developed and tested concepts for innovative new products generated by qualitative and quantitative data analysis, industry trends, and consumer insights• Supervised and managed 5 vendor teams with a total of 17 indirect reports• Managed Nielsen and Market Track contracts, led successful year-end negotiations

Paris, Fr

• Managed salon professional brands in the haircolor and texture categories to achieve sales goals of $22.5M • Launched a new haircolor brand to a multicultural, niche target market • Contributed innovative ideas for brand strategy and operational marketing plan • Planned and executed promotions, local advertising and media strategy • Managed marketing budget, product forecast, inventory, COGs, and pricing

Ewing, New Jersey, Us

Paris, France, Fr

New York, New York, Us

Chicago, Il, Us

Cybersecurity Professional Certification

Master Of Business Administration - Mba, Marketing And International Business

Bachelor Of Science, Business Administration, Marketing