EXPERIENCE
With over a decade of industry experience, Hans Lakhan has worked in both offensive and defensive roles. Before switching to red teaming, he spent 5 years working as a technical Security Analyst for a Fortune 500 telecommunications company, specializing in networking, firewalls, vulnerability management, and VPNs.
EDUCATION & CERTIFICATIONS
- B.S. Bio-Medical Information Systems, University of Minnesota
- Offensive Security Certified Professional (OSCP)
PROFESSIONAL AFFILIATIONS
Hans occasionally presents at various conferences (Blackhat, DerbyCon) and contributes to several open source projects.
PASSION FOR SECURITY
While Hans enjoys tackling complex security challenges, his true passion stems from tearing apart systems (physical, digital, process flows, and more), in which the goal is to identify weaknesses and present remediation solutions.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Injecting Rogue DNS Records Using DHCP
Understanding DHCP to Inject Rogue DNS Records via Spoofed MAC Addresses.
Azure Account Hijacking using mimikatz’s lsadump::setntlm
Senior security researcher Carlos Perez reveals a hybrid Office 365 attack method using Mimikatz to gain domain admin access and hijack user accounts,…
Password Recovery 101: Cracking More of Your List
Join VP of Consulting Services Martin Bos, Paul Burkeland, and Hans Lakhan for a webinar on password recovery tools and techniques, and gain an analytical…
ISC2 Cleveland Chapter Member Meeting - March 2026
ISC2 Cleveland Chapter March MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…
Discord Livestream - AMA: Incident Response
Ask us anything about incident response! Join us for an exclusive Discord Livestream with IR Practice Lead Ryan Macfarlane.
Copilot Security: What to Know Before You Go
In this webinar, our experts will walk you through the critical groundwork needed before deploying Microsoft 365 Copilot. Learn how you can best prepare for…
CMMC Challenges and Misunderstandings
During our next webinar, our experts will cover CMMC misunderstandings that are creating the most problems for defense contractors and subcontractors, from CUI…
ISC2 Cleveland Chapter Member Meeting - February 2026
ISC2 Cleveland Chapter February MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…
Building a Detection Foundation: Part 1 - The Single-Source Problem
The Uncomfortable Truth About Your Telemetry Let me start with an observation that might hit close to home. In my years working Incident Response cases and…
Security Noise - Ten Years: A Decade of Doing This
David Kennedy and Kelsey Segrue join us to discuss ten years of our podcast! We discuss how the cybersecurity space has evolved over the years and social media…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
