dustymmiller / sysmon-config

Sysmon configuration file template with default high-quality event tracing

Hi there 👋

Hello, I am Dusty Miller. I am a Detection Analyst at Proofpoint and enjoy creating detections and writing automation tooling to make mine and other people's jobs easier.

Professional Journey

I started working in technology on the help desk, moved into security in a Security Operations Center, and from there started working on automation tooling and detection engineering.

Skills

• Yara, Suricata, Snort, Sigma and Clam Detection Engineering
• Python 3 and Golang Development
• MITRE ATT&CK Framework and how it relates to detections
• Splunk and Splunk SOAR with various custom integrations
• Kubernetes and Docker for containerized tools and infrastructure

Certifications

• Certified Kubernetes Administrator
• Splunk Enterprise Security Administrator
• Splunk Phantom Certified Administrator

Connect with Me

🔗 You can find me on LinkedIn, Mastodon, or here on GitHub.