Adversary Emulation - Product Abuse
Current- Apply adversaries' techniques for Falcon platform abuse in test environments in order to fine-tune detections- Research new vectors for product abuse and work with engineering teams to mitigate them.- Consume internal threat intelligence and open source reporting to stay up-to-date on emerging trends and techniques- Lead and assist investigations of product abuse by partnering with the Falcon Complete SOC teams and Overwatch threat hunting teams, providing insight into adversarial tradecraft