Dusty Miller Email & Phone Number

United States

United States

Sunnyvale, California, Us

* Managed the internal Splunk Enterprise environment including regular maintenance, dashboard and search development, and troubleshooting.* Wrote python tooling to integrate existing internal tooling with Splunk Enterprise for automated enrichment.* Developed an internal alerting tool with python to integrate various public APIs and alert a variety of ways with Splunk.* Developed automated tooling to monitor threat actor infrastructure for the clusters of activity I was tracking.* Monitored, threat hunted, and tracked activities of multiple fake browser update clusters* Wrote a blog and participated in multiple podcasts to discuss the behaviors of fake browser update threat actors.

Beachwood, Ohio, Us

* Created a custom Python3 Splunk Phantom app that parsed .eml files for automated analysis in phishing playbooks.* Write and modify Splunk Phantom apps to perform various interactions with apis to add actions that were needed for automation using python.* Manage installation and on-going maintenance of Splunk Phantom instances as well as app installation, configuration, and updates.* Created playbook templates in Splunk Phantom using custom Python scripts that allowed for easy implementation of automated investigations and escalations that reduced alert volume by 30%.* Document Splunk Phantom workflow and apis and improve internal Incident Response Playbooks to help improve usage of apps and investigations.* Create playbooks and customer integrations with Splunk Phantom that allow for more efficient communication.* Led customer threat hunt and response for Log4Shell vulnerability.* Perform Threat Hunts based on Tactics, Techniques, and Procedures (TTPs) of potential threat actors as well as recent major threats in the industry.* Create customer write-ups based on investigation findings to communicate next steps to respond and further investigate possible threats.* Collaborate with customers to help investigate and respond to security incidents and misconfigurations in a variety of enterprise environments.* Write and tune searches with Splunk Search Processing Language to extract important information, eliminate false positives, and detect potential malicious activity.* Evaluate customer requirements and create Splunk Phantom playbooks to fulfill their requirements and any additional requests for the playbooks.