GeezerVison

👋 Intro:

🔭 I’ve been working in the Cyber Threat Intelligence & Threat Hunting since 2019
🎓 BSc (Hons) Graduate of Computer and Information Security - 2016-2019
📜 Student of SANS FOR578 and earned the GIAC GCTI certification
📝 Co-Author and Instructor of the SANS FOR589 Cybercrime Intelligence course
👉 Read about my first year in CTI here
🕵️‍♂️ I've contributed to the MITRE ATT&CK framework - TeamTNT & SEO Poisoning
📚 I create my own Hacker Fiction stories (with a little help from AI) here
💻 Previously worked for Cyjax as a CTI Researcher, read my Research Blogs here
🌐 Previously worked at the Equinix Threat Analysis Center (ETAC) as a CTI Researcher and Threat Hunting Program Lead
🛜 Currently working at Team Cymru as a Senior Threat Intelligence Advisor

Open sources tools for CTI - Collection of resources for OSINT analysis
2x Insider Threat-themed CTFs - OSINT challenges
CTI Lexicon- Acronyms and Technical Jargon
CTI Quiz - 4 Topics of Multiple Practice Questions
Abuse Legitimate Services - List of services used for malware and phishing
Breach Report Collection - Collection of breach reports for case studies
OPSEC 101 - A guide to better security for non-technical family, friends, and colleagues
The CTI Analyst Challenge - A training repository for CTI analysts to practice answering PIRs and RFIs
The Ransomware Tool Matrix - A repository of tools used by various ransomware gangs
The Russian APT Tool Matrix - A repository of tools used by various Russian APT groups
The Ransomware Vulnerability Matrix - A repository of vulnerabilities exploited by various ransomware gangs
MITRE ATT&CK Mappings - A repository of TTPs from OSINT reports mapped to the ATT&CK
Awesome Ransomware - A repository of resources to track and investigate ransomware

EternalLiberty - APT moniker database
Curated Intel: Log4Shell IOCs - Vetted IOCs and analysis of threats leveraging Log4Shell
Curated Intel: Ukraine Cyber Operations - Threat Intelligence to assist Ukrainian organisations
Curated Intel: CTI Fundamentals - A collection of essential resources related to CTI theory
Curated Intel: MOVEit Transfer Campaign Tracking - Tracking events related to the MOVEit campaign
Curated Intel: Threat Actor Profile Guide - A guide for CTI analysts
Curated Intel: Attribution to IP - A way to find out who owns an IP address

Media Org	Theme	URL
BankInfoSecurity	Help Desk Hoax: How Attackers Bypass Tech Defenses	bankinfosecurity.com
Infosecurity Magazine	#Infosec2025: How to Defend Against Scattered Spider	infosecurity-magazine.com

Conference	Workshop Title	URL
BSides London 2023	Keep Your Enemies Closer: How to Profile and Track Threat Actors	bsides-london-2023
BSides London 2025	Threat Actors: Gotta Catch Them All	bsides-london-2025

Podcast	Topic(s)	URL
Risky Biz News	Critical vulnerability (CVE-2022-1388) in F5 BIG-IP (from 8m 20s)	risky.biz
Risky Biz News	BlackBasta Leaks	risky.biz
Technical Outcast	Curated Intelligence on the Conti Playbook leaks (from 30m 30s)	spotify.com
Darknet Diaries #126	REvil Ransomware	darknetdiaries.com
Click Here by Recorded Future News	Breach Forums Takedown	twitter.com/ClickHereShow
MyOSINT Training	Part of the "Careers Using OSINT Skills" series	YouTube
Infosecurity Magazine	How 2025 Shaped the Future of Cybersecurity	infosecurity-magazine.com
Infosecurity Magazine	Inside the MOVEit Attack: Decrypting Clop's TTPs and Empowering Cybersecurity Practitioners (from 16m 21s)	infosecurity-magazine.com
Intel471 Cybercrime Exposed	The Extortionists	intel471.com
SANS Wait Just An Infosec	In Hot Pursuit: Tracking Ransomware Actors (from 13m 00s)	youtube.com
SANS Threat Analysis Rundown (STAR)	Disccusing Threats from Week 43 of 2023	linkedin.com
SANS Wait Just An Infosec	Ransomware Kingpins LockBit Disrupted	YouTube
The CTI Podcast with Pedro Kertzman	From Ransomware Matrices To Actionable Threat Actor Profiles	YouTube