Travis Green Email & Phone Number

San Francisco, Ca, Us

Member of the fantastic Corelight Labs team

- Performing cloud DFIR on Azure- Determining incident root cause- Reporting findings & providing recommendations

- Lead team members performing pathfinding and threat hunting- Created new methods of generating threat intelligence data and analysis- Lead the team's effort to leverage platform data for intelligence collection and analysis- Joined the software development team to implement platform features and inform product strategy- Designed and implemented the security data pipeline- Created methods and tools for the presentation of security data

Denver, Co, Us

- Conducted incident response and analyzed intrusions- Employed repeated analyses to monitor threat actor activity and observe the progression of their tactics, techniques, and procedures- Developed a detection system integrating many data sources to accelerate detection time- Produced original threat intelligence and detection logic to capitalize on it- Created a system to analyze, improve and enrich inbound threat intelligence feeds- Collaborated with product & platform teams to address detection efficacy and future direction

Lafayette, Indiana, Us

- Analyzed malware and TTPs used by threat actor groups to build detection logic for the EmergingThreats Pro feed- Created threat intelligence artifacts for disk, memory, and network-based indicators via dynamic malware analysis- Assessed new threats and adversary tools and tactics and procedures- Gave training on creating Suricata and Snort IDS signatures.- Mentored junior team members- Created 4,000+ Suricata, Snort, and YARA signatures- Developed Python tools to streamline network activity analysis and intelligence collection

Vienna, Va, Us

- Re-engineered network security boundaries to convert strategic sites to a tactical footprint- Developed and executed plan to migrate users to other sites- Managed DIACAP compliance through migrations- Established new vulnerability assessment programs

Reston, Va, Us

- Advised USFOR-A command on projects across the Southwest Asia theater of operations- Deployed intrusion detection sensor grid- Designed and implemented DNS improvments to facilitate IT services in remote areas- Participated significantly in the implementation of a metropolitan sized private cloud service

Huntsville, Al, Us

- Developed and deployed a robust IDS platform for the Regional Computer Emergency Response Team covering all DoD Southwest Asia networks (100+ Snort sensors)- Created an innovative tap monitoring system to ensure packet acquisition quality at scale- Developed threat hunting procedures to mine network data for anomalies and potential threats- Performed DFIR as a member of the security operations center

Us

- Engineered and deployed clustered Exchange (6K users)- Administered enterprise systems (45K users, 28 sites)- Planned and executed a SAN migration expanding and re-deploying a legacy SAN as tiered backup storage- Expanded the functional area of DoD Common Access Card Login to 15k+ additional users- Led the expansion of Active Directory services across Kuwait, Afghanistan, and Qatar

Us

- Lead the systems team for 580th Direct Signal Support Team, supporting 10k+ users- Performed network vulnerability scanning, system backups, hardware & software installs- Deployed clustered Exchange

Redmond, Wa, Us

- Led the managed services team supporting the webdriver product- Deployed intrusion detection systems- Bootstrapped disaster recovery, web services reporting, test lab, and Active Directory programs

Redmond, Washington, Us

- Tested the Windows operating system core- Maintained legacy test lab automation scripts- Participated in a highly effective fault injection testing program led by senior developers