Skip to content
Logo

I speak at conferences and meetups about cybersecurity, adversary emulation, detection engineering, and building tools for them.Browse my past talks below.

TypeAll
TagsAll tags

7 of 7

Past Talks

Hacking the Orchard: Offensive Security with AppleScript and JXA

Hacking the Orchard: Offensive Security with AppleScript and JXA

A walkthrough of macOS ATT&CK techniques using LOAS — ATT&CK-mapped atomic tests built for Apple platforms. Covers AppleScript, JXA, Remote Apple Events, TCC, and how to use these techniques for detection validation.

June 12, 2026•Walmart Cyber Sessions: Hacking in Herndon•Herndon, VA

ATT&CKDetection EngineeringDetection ValidationAdversary EmulationmacOSAppleScriptLiving Off the LandSlidesBlog
Catch Me If You Can: Detector-Resistant Evasion via Semantics-Preserving Command Re-Realization

Catch Me If You Can: Detector-Resistant Evasion via Semantics-Preserving Command Re-Realization

A research paper exploring techniques for evading detections through semantics-preserving command re-realization, without altering the underlying behavior of the commands.

May 21, 2026•IEEE Symposium on Security and Privacy (S&P)•San Francisco, CA

Red TeamDetection EngineeringEvasionSecurity ResearchAdversary EmulationPublication
Trust No Trap: The Agent Always Knocks

Trust No Trap: The Agent Always Knocks

Using Agentic MCP Pipelines as Canaries for Your Deception Infrastructure

April 26, 2026•BSides Charm // Cyber Deception Village•Towson, MD

Cyber DeceptionDetection ValidationMCPSlides
Supercharging Atomic Red Team with AI

Supercharging Atomic Red Team with AI

A quick intro to the Atomic Red Team MCP server: what it is, how it works, and why it might change how you approach adversary emulation.

April 21, 2026•SecOps Weekly•Virtual

AIMCPAtomic Red TeamAdversary EmulationDetection ValidationSlidesVideoBlog
Bridging the Gap: Enhancing Detection Coverage with Atomic Red Team, Sigma, and MITRE ATT&CK

Bridging the Gap: Enhancing Detection Coverage with Atomic Red Team, Sigma, and MITRE ATT&CK

A practical approach to continuous detection validation using Atomic Red Team, Sigma rules, and MITRE ATT&CK mapping via GitHub Actions and Docker. Learn how to automate detection coverage assessment and visualize security gaps using ATT&CK Navigator.

October 22, 2024•MITRE ATT&CKCON 5.0•McLean, VA

MITRE ATT&CKDetection EngineeringAtomic Red TeamAdversary EmulationSigmaSlides
Simplify security testing with Docker, Windows Sandbox, and Atomic Red Team

Simplify security testing with Docker, Windows Sandbox, and Atomic Red Team

Learn how you can install and use Atomic Red Team in Windows Sandbox and Docker environments to simply and safely validate detective controls.

October 30, 2023•Atomic Friday•Virtual

Atomic Red TeamDetection ValidationAdversary EmulationInfrastructureVideo
Expanding your skillset with Atomic Red Team

Expanding your skillset with Atomic Red Team

Whether you want to advance your career or are new to information security, Atomic Red Team can help. Here are a slew of tips from the atomic community.

July 31, 2020•Atomic Friday•Virtual

Atomic Red TeamInfosec CareersCareer DevelopmentCommunityVideo