About Me
Why Malware on Tap?
Because reasons! I like beer and I like malware.Support the Project ❤️
If you find the threat intelligence / information useful, you can support this passion project by clicking the Ko-Fi 'buy me a beer!' button in the nav bar.Contributions will help cover the costs of running the site, my honeypots/etc. (I won't spend it *all* on beer, I promise!).
More Boring Details About Me
Career Path
At CyberShell, I provide External Attack Surface Management (EASM) services, incident reponse consulting, managed Breach & Attack Simulations (MBAS), and more.
At Sonrai Security I published and maintained content across docs portals, APIs, and product surfaces, owned docs-as-code workflows/pipelines, and regularly worked in Markdown, HTML/CSS, React, JavaScript, and Python.
Customer Success Specialist
I spent just over three years doing QA, UX brainstorming, project coordination, technical documentation, and beginner React/TypeScript application improvements for an aviation operations software development business.
Cyber Security Analyst / Shift Lead, then Training & QA Lead
This timeframe involved security operations, threat hunting, NIDS/LIDS, EDR, malware analysis, security awareness material development, performance auditing, analyst training, etc.
Efraud, healthcare IT
Earlier roles included efraud analysis at NTT DATA Americas plus healthcare IT and migration/project coordination work with the Nova Scotia Health Authority / Capital District Health Authority.
Education
Database Administration Diploma
I graduated from the Nova Scotia Community College (NSCC) with a diploma in Database Administration and was the recipient of the Information Technology Database Administration Award. While I've never been a Database Administrator outright, I've implemented and co-managed many a database in my day!
Talks And Publications
AtlSecCon 2023 Speaker
I gave a talk at AtlSecCon 2023 entitled "Technical Documentation - It's Less Boring Than it Sounds!".
PublicationsPowerful Cloud Permissions Series
I've co-written content for Sonrai Security on how risky cloud permissions map to attacker behavior and MITRE ATT&CK stages (Parts 1-6).