Craig Plath's Linkedin Analytics

I am an experienced cybersecurity professional, with 13 years working in progressively more senior roles in the field. I am a qualified Senior SOC Analyst, Threat Hunter and Cybersecurity Detection Engineer with Incident Handling experience. I am well versed in SIEM and EDR/XDR technologies including MDE, SentinelOne, FireEye HX, Splunk, ArcSight and Microsoft Sentinel. I am creative, analytical, and detail-oriented, with more than 20 years of leadership and project deployment experience. I am well versed in modern Operating System logging, SIEM and EDR/XDR/EPP technologies and the Mitre ATT&CK framework. I am also familiar with the NIST Cybersecurity Framework and Lockheed Martin Cyber Kill Chain and an effective Blue Team and Purple Team participant. I have developed and deployed more than 400 SIEM rules and 1000 EDR rules, using the CI/CD principals to prevent fraud, capture zero-day exploit attempts and provide protection and remediation tools against all forms of cybersecurity threat from attacks of opportunity to organized crime and nation-state attackers. These efforts have resulted in increased true positive detection, improved fraud prevention and significantly decreased response times through detection and automation.