Dec 14, 2018 - From Bear to Vault: Designing a New Protocol to Extend the APT Communications Toolset
An IEEE-published paper with Nicholas Hendee: investigating contemporary APT covert communications and prototyping a novel protocol combining the more potent ideas from a number of adversaries. Read more

Apr 14, 2018 - Turning Domain Data into Domain Intelligence
A talk I gave at Security B-Sides Rochester 2018 on the earlier rendition of Threatwork (then 'dnstrace'): getting DNS data at scale, and what unexpected misconfigurations and early results came out of it. Read more