Björn Kraal

* Responded to several cyber incidents

* Helped build out the cyber incident response environment

• Created a stage one payload.
• Made the stage one payload undetectable by popular antivirus solutions.
• Setup a command and control server.

• Created a parser for firewall logs.
• Created a guide for adding different to Security Onion.
• Created new and expended upon current use cases based on the parsed firewall logs.
• Monitored, analyzed, and acted upon security alerts.

• Developed a web application penetration testing process.
• Created penetration testing report templates.
• Setup mobile device management.

• Linked use cases from different user levels using the MAGMA-framework.
• Created an attack simulator to test QRadar offenses.
• Created documentation on how to use QRadar for new employees.

• Developed, tested and implemented a vulnerability management process for externally hosted websites.
• Automated ~50 hours of monthly manual labour using VBA-scripts.