Jack Halstead Email & Phone Number

Australia

Melbourne, Victoria, Australia

Lead a dynamic Incident Response team responsible for identifying, containing, and eradicating security incidents, ensuring minimal impact on operations. Developed and implemented a robust Incident Response plan, reducing response times and improving incident resolution efficiency. Collaborated with the security operations centre (SOC) to enhance threat detection capabilities, resulting in a reduction in successful cyberattacks.Conducted post-incident analysis to identify root causes and recommend security enhancements, reducing the likelihood of recurring incidents.

I highlight patterns indicative of malicious IOCs, deploy EDR tools across digital estates to define scope of compromise and identify affected devices for analysis; assessing entry vector, threat actor TTPs and maintain proactive defensive posture. Detected threats are interrogated using a variety of techniques, such as behaviour analytics, to pinpoint initial exploitation and followed up the cyber kill-chain; this is combined with threat intelligence to ensure a holistic investigation.- Targeted forensic collections, hunting for indicators of compromise;- Deployment of EDR tools to target and contain APTs;- Host and Network forensic analysis - Assist clients remediate and rebuild security posture post-breach;- Develop tool sets to improve efficiency;- Writing SOPs on tools and forensic procedures to achieve efficiency, quality and uniformity of performance;- Research and analyse APT's to follow attack vectors and threat actor TTPs;- Writing technical papers and forensic reports for C-level and technical personnel.

London, United Kingdom

- Forensic OS and event log analysis, network traffic collection and network log analysis- Hunting in north/south traffic to identify C2/exfiltration and east/west traffic for lateral movement.- SOC secondment, I proactively monitored SIEM logs, analysed network traffic and presented threat intel to the DFIR team.- Research APT group methodologies and applied forensic evidence to MITRE Framework- Proficient in implementation and usage of tools such as FTK, Carbon Black, SOF-ELK, Thor, Plaso, KAPE, Volatility and many other open-source investigative tools.

London, United Kingdom

- Assisted with lab and field-based forensic collections;- Became platform agnostic with servers, PCs, phones and varying OS; - Learnt to deploy EDR tools to protect and remediate client networks;- Perform targeted data exports for eDiscovery platforms;- Responsible for the labs evidence handling and dongle tracking.