EXPERIENCE
- 10+ years IT
- 8+ years cybersecurity
- 5+ years penetration testing/consulting
EDUCATION & CERTIFICATIONS
- Associate in Science, Information Systems Technology, Community College of the Air Force
- Bachelor of Science, Computer Networks & Security, University of Maryland University College
- Offensive Security Certified Professional (OSCP)
- Offensive Security Wireless Professional (OSWP)
- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- GIAC Web Application Penetration Tester (GWAPT)
- GIAC Penetration Tester (GPEN)
- GIAC Security Essentials (GSEC)
- GIAC Certified Incident Handler (GCIH)
- GIAC Certified Intrusion Analyst (GCIA)
- Certified Ethical Hacker (CEH)
- CompTIA Network+
- CompTIA Security+
INDUSTRY CONTRIBUTIONS
- Blog - www.n00py.io
- GitHub - https://github.com/n00py
- Presented at BSides Denver, BSides Puerto Rico, and NolaCon
PASSION FOR SECURITY
I just love popping shells.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
The SOCKS We Have at Home
Use OpenSSH to pivot through networks without complex tools, leveraging Windows 10 and Server 2019's default installation, and easily set up a bind shell for…
Practical Attacks against NTLMv1
Exploit NTLMv1 vulnerabilities to gain administrative access, leveraging authentication downgrade, LDAP relay, and Shadow Credentials attacks, with techniques…
Manipulating User Passwords Without Mimikatz
Manipulating User Passwords Without Mimikatz: Exploring Alternative Techniques for Lateral Movement and Privilege Escalation.
You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections
Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…
ISC2 Cleveland Chapter Member Meeting - March 2026
ISC2 Cleveland Chapter March MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…
Policy as Code: Stop Writing Policies and Start Compiling Them
The Problem Nobody Wants to Talk AboutLet me paint a picture most security leaders will recognize.You have 30+ policies living as Word documents on SharePoint.…
Building a Detection Foundation: Part 4 - Sysmon
Filling the Gaps Native Logging Can'tAt this point in our series, we have Windows Security events capturing logon sessions and process creation, and…
Security Noise - AI is Exploring The Deep Blue CVEs
On this episode of Security Noise, we explore the cutting-edge use of AI in vulnerability research, exploit development, and cybersecurity defense with guests…
ABC7 Chicago - March Madness betting, ticket scams targeting college basketball tournament fans
March Madness is in full swing and so are the scams, the latest being fake tickets sales and "bogus" bracket challenges. Advisory Solutions Director Alex…
Discord Livestream - AMA: Incident Response
Ask us anything about incident response! Join us for an exclusive Discord Livestream with IR Practice Lead Ryan Macfarlane.
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
