Robert Reyes Email & Phone Number

Sunnyvale, Ca, Us

Presently serve as a Lead of Digital Forensics and Incident Response (DFIR) and a Subject Matter Expert (SME) for Fortinet, which is a global DFIR Firm with offices in the United States, Europe, and Asia. Routinely lead IR engagements, while overseeing, mentoring, and training analysts supporting the ongoing investigations. The team is frequently deployed to run engagements dealing with APT campaigns, network intrusions, data breaches, and ransomware encryption investigations. During the engagements, the team of analysts conduct network and host-based analysis on Windows, Linux, and Mac systems to include file system, log, and memory analysis. The team routinely deploys and leverages FortiEDR and Velociraptor during the engagements, which provides a high level of visibility into compromised environments with the capacity to take effective remediation actions in coordinationwith the client(s). The team is also well versed in providing compromise assessments of client’s networks in an effort to ascertain whether there are indications of undetected malicious activity in those networks that need to be addressed by the client in coordination with the Fortinet DFIR team.

New York, Ny, Us

Serve as a Director of Digital Forensics and Incident Response (DFIR) and a Subject Matter Expert (SME) for Stroz Friedberg (AON), which is a global DFIR Firm with offices in the United States, Europe, and Asia. Supervise, mentor, and provide guidance to direct reports on a daily basis. Actively lead and conduct complex digital forensics investigations, involving multi-national corporations, which have incurred network intrusions, breaches, and ransomware attacks within their critical IT infrastructure; Perform host-based and network analysis across all major operating systems and network device platforms. Routinely Scope incoming engagements; Assemble and manage teams of Digital Forensic analysts, Endpoint Detection and Response (EDR) Analysts, and Evidence Custodians for active engagements; Provide daily updates and expert opinions to clients based on forensic analysis findings; Compile and deliver high-quality forensic reports at the culmination of the engagements; Conduct threat hunts for unauthorized access and adversaries in a client’s environment, leveraging a variety of tools and techniques, and specialize in network forensic analysis. Coordinate and collaborate with law enforcement, regulators, lawyers and business stakeholders.

Chicago, Il, Us

Served as a Principal Cyber Security Analyst and Digital Forensics Subject Matter Expert (SME) for United Airlines, which operates one of the largest domestic and international routes across the United States and six (6) continents. Actively conducted complex digital investigations, involving network intrusions and breaches of the critical IT infrastructure; triage and investigate Security Operations Center (SOC) high priority alerts, requiring additional in-depth analysis; data loss prevention (DLP); malfeasance; un-authorized elevation of privileges; insider threats; and employee misconduct. Proactively hunted for adversaries leveraging a variety of tools and techniques, and specialize in network forensic analysis. Routinely coordinated and collaborated with law enforcement, regulators, lawyers and business stakeholders.

Network Forensics Consulting Firm that conducts Incident Response and Computer Forensic Examinations and Threat Hunting Assessments. Litigation and Corporate support includes network intrusions; data breaches; exfiltration of Personal Identifiable Information (PII); theft of intellectual property; data loss prevention; malfeasance; illicit Internet activity; unauthorized escalation of privileges; forged email correspondence; unauthorized use of network devices; mobile device acquisitions and forensic analysis (iPad; iPod; etc.); phone acquisitions and forensic analysis; etc.

San Jose, Ca, Us

Served as an Incident Response and Digital Forensics Subject Matter Expert (SME) for Cisco Systems, Inc., which is the largest networking company in the world and a Fortune 100 corporation. Routinely performed complex Incident Response engagements and develop conclusions based on the findings. Conducted forensic analysis of data breaches, and determine the cause and extent of data loss, and advised on immediate, mid-term, and long-term remediation. Provided briefings and advise executive management on breach response, best practices, and after-action analysis. Handled complex Threat Hunting investigations and provided expert services, pertaining to insider threats and Advanced Persistent Threats (APTs). Routinely coordinated with clients and provided Readiness assessments, Gap analysis, and Table Top exercises.

Atlanta, Ga, Us

Previously served as an Incident Response Consultant and provided analysis and conclusions based on analysis of the evidence; Analyzed network intrusions and advised on immediate, mid-term, and long-term remediation. Provided briefings and advised executive management on breach response and best practices. Routinely performed peer reviews of other consultant’s forensic reports. Provide focused e-discovery consulting, collection, and processing. Provide breach plan afteraction analysis.

Incident Response and Network Investigations involving network intrusions; data breaches; Advanced Persistent Threats (APTs); malfeasance; fraud; forged email correspondence; unauthorized elevation of privileges; unauthorized use of network devices; ex-filtration of intellectual property; etc.