Jacob Pimental

Investigate host-based and network-based intrusions across the global enterprise utilizing disk and memory forensics, PCAP Analysis, and log review in Splunk
Designs and implements Carbon Black watchlists, Yara Rules, Splunk alerts and dashboards based on previous incidents, threat hunting, and threat intelligence
Analyze malware samples to identify new tactics and techniques, pull out suspicious IOCs, and develop alerting for techniques used
Work with Splunk as a SIEM to hunt for suspicious activities, design alerting, and identify threats across the global enterprise
Lead the Blue Team during Red Team exercises to test controls and provide feedback for current visibility across the network
Utilize data analytics skills to develop advanced Splunk controls for tactics such as beaconing hosts and possible DDoS attacks
Develop workflows and process documents to assist IR Analysts in triaging different ticket types

This was for a webinar hosted by SourceDefense where I was a guest speaker. I discuss how it is possible to detect Magecart infections on e-commerce websites and release a tool I created to automate this process.