Threat-guided Detection
Engineering
In the era of unprecedented technological growth, cyber adversaries have evolved their tactics. The good part is, we can still detect and defend against these tactics. The solution is a fast, tailored response to your industry’s needs and the changing world.
While using advanced security tech is crucial, it’s vital to know no solution offers a 100% security guarantee. Your security plan should cover all risks. Default settings might not fit your unique setup. Threat detection can be decreased with proper insight and custom configuration.
High trust in external vendors serving many clients like us can hinder verification due to our limits. Depend on our expertise for thorough evaluation and reliable results tailored to you, reducing uncertainties from broad services.
Our Process:
Assessment of available log and data sources
Development of a tailored threat landscape
Prioritization and selection of attack techniques
Creation of custom rules and hunting queries
Tuning rules to environmental requirements
Creation of incident response procedures for created rules
Final summary and knowledge transfer
Offensive testing of rules in the client's environment
Competences Set
Competences Set
Senior Penetration Tester & ISO 27001 Auditor
BIO
The individual has a Ph.D. in Cybersecurity and programming background , showcasing a unique blend of technical expertise. Their career includes roles in cybersecurity, focusing on penetration testing, vulnerability analysis, and web + mobile application security.
Adept in programming, cloud-based security, and hold advanced cybersecurity certifications. This profile highlights a combination of academic achievement, practical IT security skills, and a track record in cybersecurity leadership.
Represents Poland at Locked Shields international exercise from 2023
Technologies:
- Linux
- MacOS
- Web Applications
- Burp Suite
- Frida
- Mobile Applications
- Android
- IOS
Certificates:
- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- GIAC Web Application Penetration Tester (GWAPT)
- GIAC Mobile Device Security Analyst (GMOB)
- GIAC Certified Incident Handler Certification (GCIH)
- Security clearances to the “top secret” clause issued by the ISA (ABW)
- Security clearances „UE: très secret ue/eu top secret” issued by the ISA (ABW)
- Security clearances „NATO: cosmic top secret” issued by the ISA (ABW)
- ISO 27001 lead auditor
- Network security penetration tests – Securitum
- Security of mobile applications – Securitum
- DO288 Red Hat OpenShift Development I: Containerizing Applications
Key Competences:
- Cybersecurity
- Penetration Testing
- Vulnerability Analysis
- Cloud Security
- Vulnerability Reporting
- Project Management
- Research
- Python
- Git
- Docker
- Ansible
- Bash
- OWASP Methodology
- Code Review
- Incident Handling
- Advanced Pentesting
- Web Penetration
- Mobile Security
- ISO Auditor
Michael Koczwara
Senior Threat Hunter & Threat Intelligence Specialist
BIO
Cybersecurity expert specializes in threat hunting, penetration testing, red teaming, and threat research. He’s also the founder of Intel Ops Academy, where he teaches students how to track down APTs, criminal groups, and harmful infrastructure.
Hold advanced cybersecurity certifications. Oxford University Computer Science Graduate
Technologies:
- CarbonBlack
- Splunk
- CrowdStrike
- Forcepoint
- Tanium Trace
- Anomali Threatstream
- Censys
- Shodan
- Cobalt Strike
Certificates:
- University of South Wales: QSTM/Tigerscheme.
- SANS GIAC 508: Advanced Threat Hunting, Incident Response & Digital Forensics.
- SANS GIAC 599: Defeating Advanced Adversaries, Purple Team Tactics & Kill Chain Defences.
- SANS GIAC 660: Advanced Penetration Testing, Ethical Hacking & Exploit Writing.
- Certified Red Team Operator (CRTO)
- OSCP Offensive Security Certified Professional
- Applied Network Defence: Practical Threat Hunting
- eLearnSecurity Web Application Penetration Tester (eWPT)
- eLearnSecurity Certified Professional Penetration Tester (eCPPT)
- eLearnSecurity Mobile Application Penetration Tester (eMAPT)
Key Competences:
- Cybersecurity
- Threat hunting
- Threat Intelligence
- Adversary Infrastructure
- Security Monitoring
- Threat Detection
- Adversary Emulations
- Penetration Testing
- Red Teaming
- Vulnerability Analysis
- Vulnerability Reporting
- Incident Response
- Threat Tracking
- Malware analysis
- Web Security
- Security Research
Konrad Kaluzny
Principal Threat Hunter & Senior Security Specialist
BIO
Expert with defensive and offensive cybersecurity background , showcasing a unique blend of technical expertise. Their career includes roles in cybersecurity, focusing on Threat Hunting and Intelligence, Cloud Security, and offensive security exercises inluding red teaming and pentesting.
Hold advanced cybersecurity certifications. This profile highlights a combination of academic achievement, practical IT security skills, and a track record in cybersecurity leadership.
Represents Poland at Locked Shields international exercise from 2023
Technologies:
- MS Defender XDR
- Entra ID
- MS Sentinel
- MS Azure
- Splunk
- CrowdStrike
- Burp Suite
- Web Applications
Certificates:
- Certified Azure Red Team Professional (CARTP)
- Certified Red Team Professional (CRTP)
- SANS SEC560, GIAC Penetration Tester
- SANS SEC504, GIAC Certified Incident Handler
- CVA: Certified Vulnerability Assessor
- OSCP: Offensive Security Certified Professional
- Configure SIEM security operations using Microsoft Sentinel
- CCNA Cyber Ops
- ECSA: EC-Council Certified Security Analyst
- CEH: Certified Ethical Hacker
Key Competences:
- Cybersecurity
- Threat hunting
- Detection Engineering
- Cloud Security
- Threat Intelligence
- Security Egineering
- EDR solutions
- SIEM solutions
- Security Monitoring
- Threat Detection
- Adversary Emulations
- Penetration Testing
- Project Management
- MITRE ATT&CK
- Vulnerability Analysis
- Vulnerability Reporting
- Incident Response
- Digital Forensics
- OWASP Methodology
- Malware analysis
- Web Security
Competences Set
Senior Security Enginner & Senior Penetration Tester
BIO
The individual has defensive and offensive cybersecurity background , showcasing a unique blend of technical expertise. Their career includes roles in cybersecurity, focusing on Threat Hunting and Intelligence, Cloud Security, and offensive security exercises inluding red teaming and pentesting.
Hold advanced cybersecurity certifications. This profile highlights a combination of academic achievement, practical IT security skills, and a track record in cybersecurity leadership.
Technologies:
- MS 365 DEfender
- Entra ID
- MS Sentinel
- MS Azure
- Splunk
- CrowdStrike
- Burp Suite
- Web Applications
Certificates:
- Certified Azure Red Team Professional (CARTP)
- Certified Red Team Professional (CRTP)
- SANS SEC560, GIAC Penetration Tester
- SANS SEC504, GIAC Certified Incident Handler
- CVA: Certified Vulnerability Assessor
- OSCP: Offensive Security Certified Professional
- Configure SIEM security operations using Microsoft Sentinel
- CCNA Cyber Ops
- ECSA: EC-Council Certified Security Analyst
- CEH: Certified Ethical Hacker
Key Competences:
- Cybersecurity
- Threat hunting
- Detection Engineering
- Cloud Security
- Threat Intelligence
- Security Eginerring
- EDR solutions
- SIEM solutions
- Security Monitoring
- Threat Detection
- Adversary Emulations
- Penetration Testing
- Project Management
- Vulnerability Analysis
- Vulnerability Reporting
- Incident Response
- Digital Forensics
- OWASP Methodology
- Code Review
- Malware analysis
- Web Security
Competences Set
Senior Threat Hunter Senior Incident Responder
BIO
Incident Responder and Threat Hunter with almost 10 years of expertise in cybersecurity with good understanding for other Blue Team components: SOC, TI, VMS etc.
Practical experience in response to domain-wide breaches for political-motivated Threat Actors (APTs) and financial-motivate groups (Ransomware). Wide knowledge about digital forensics. Large know-how about proactive hunting of Threat Actors presence in corporate environments and building custom detection to fulfill monitoring gaps. His knowledge and expertise confirmed with multiple GIAC certificates.
Technologies:
- Microsoft Sentinel
- Microsoft XDR
- Crowd Strike
- ElasticStack
- Splunk
- Microsoft Azure
- Microsoft Entra ID
- Active Directory
Certificates:
- GIAC Certified Cloud Forensics Responder (GCFR)
- GIAC Certified Forensic Analyst (GCFA)
- GIAC Certified Forensic Examiner (GCFE)
- GIAC Advisory Board
- C)IHE – Certified Incident Handling Engineer
- C)PEH – Certified Professional Ethical Hacker training
- ITIL® Foundation Certificate in IT Service Management
Key Competences:
- Incident Response
- Forensics
- Threat Hunting
- Detection Engineering
- EDR
- SIEM
- Incident Handling
- APTs and Ransomware IR
- Handling of domain-wide breaches
- Cross-source logs analysis
Competences Set
Senior Detection Engineer SIEM & EDR Expert
BIO
Cybersecurity expert specializing in detection engineering. With a keen eye for spotting threats, he crafts innovative solutions to safeguard digital ecosystems. His expertise lies in designing detection systems using cutting-edge technologies, ensuring proactive defense against cyber threats.
Technologies:
- Microsoft Sentinel
- Microsoft XDR
- QRadar
- ElasticStack
- Splunk
- Microsoft Azure
- Microsoft Entra ID
- Active Directory
Certificates:
- GIAC Security Operations Certified (GSOC)
- GIAC Certified Detection Analyst (GCDA)
- GIAC Open Source Intelligence (GOSI)
- eLearnSecurity Certified Threat Hunting Professional
- CyberDefenders Certified CyberDefender (CCD)
- eLearnSecurity Certified Digital Forensics Professional
- Certified Red Team Operator (CRTO)
- Altered Security Certified Red Team Professional (CRTP)
- Offsec Defense Analyst (OSDA)
- Altered Security Certified Azure Red Team Professional (CARTP)
- Zero-Point Security Ltd Red Team Operator (CRTO)
- Security Blue Team Blue Team Level 1 (BTL1)
- eLearnSecurity Web Application Penetration Tester
Key Competences:
- Cybersecurity
- Detection Engineering
- Threat Hunting
- SIEM Architecture
- Security Operations Center
- Baselining
- Data Collection
- Data Analysis
- Endpoint Security
- Network Security
- Threat Detection
- Regular Expressions
- MITRE ATT&CK
- User Behavior Monitoring
- Open Source Intelligence
- Advanced Endpoint Analytics
Got a Unique Security Need? We've Got You.
Our industry-wide expert network ensures we can address any security concern.
Your safety is our mission, regardless of the threat.