Skip to Main Content
All Trimarc services are now delivered through TrustedSec! Learn more

Brandon McGrath

Senior Security Consultant

EXPERIENCE
Brandon began work as a Security Consultant after graduation. From there, he began contributing to the open-source community and research as a whole.

EDUCATION & CERTIFICATIONS

  • BS – Computer Networks and Security – Birmingham City University
  • Certified Red Team Operator (CRTO)
  • Offensive Security Certified Professional (OSCP)
  • Certified Red Team Professional (CRTP)
  • eLearnSecurity Penetration Testing eXtreme (PTX)

PROFESSIONAL AFFILIATIONS
Research and work can be found at:

PASSION FOR SECURITY
Brandon has a passion for pulling apart Windows and AV products alike, which tends to manifest in many Visual Studio project files.

Featured Blogs And Resources

Discover the blogs, analysis, webinars, and podcasts by this team member.

Blog November 03 2022

Windows Processes, Nefarious Anomalies, and You: Threads

In part 1 of this blog mini-series, we looked at memory regions and analyzed them to find some potential malicious behavior. In part 2, we will do the same…

Read about this article
Blog November 01 2022

Windows Processes, Nefarious Anomalies, and You: Memory Regions

Memory Scanner identifies RWX and MZ headers in private memory regions, indicating potential malicious activity, providing context for further analysis and…

Read about this article
Webinars April 15 2026

You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections

Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…

Read about this article
Events TrustedSec HQ | March 31 2026

ISC2 Cleveland Chapter Member Meeting - March 2026

ISC2 Cleveland Chapter March MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…

Read about this article
Blog March 26 2026

Policy as Code: Stop Writing Policies and Start Compiling Them

The Problem Nobody Wants to Talk AboutLet me paint a picture most security leaders will recognize.You have 30+ policies living as Word documents on SharePoint.…

Read about this article
Blog March 24 2026

Building a Detection Foundation: Part 4 - Sysmon

Filling the Gaps Native Logging Can'tAt this point in our series, we have Windows Security events capturing logon sessions and process creation, and…

Read about this article
Podcasts March 24 2026

Security Noise - AI is Exploring The Deep Blue CVEs

On this episode of Security Noise, we explore the cutting-edge use of AI in vulnerability research, exploit development, and cybersecurity defense with guests…

Read about this article
News March 20 2026

ABC7 Chicago - March Madness betting, ticket scams targeting college basketball tournament fans

March Madness is in full swing and so are the scams, the latest being fake tickets sales and "bogus" bracket challenges. Advisory Solutions Director Alex…

Read about this article
Events March 19 2026

Discord Livestream - AMA: Incident Response

Ask us anything about incident response! Join us for an exclusive Discord Livestream with IR Practice Lead Ryan Macfarlane.

Read about this article
Blog March 19 2026

Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

Invisible password sprays. Invisible logins. Full tokens returned.Nyxgeek here. It's 2026 and I've got two more Azure Entra ID sign-in log bypasses…

Read about this article

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.