About
nice to meet you!
My name is Patterson Cake and I have worked in cybersecurity for more than two decades, specializing in the development of incident-response teams, programs, and processes. I am currently the Director of Incident Response for Black Hills Information Security, hold more than twenty-five industry certifications, am a former SANS instructor, teach for Antisyphon, and have trained law enforcement, military, and national cybersecurity organizations on four continents. I am the founder of Haven Information Security, LLC and of redacteCON (Western Colorado and Eastern Utah's cybersecurity conference), the creator of the "Incident Response Capabilities Matrix Model" and "Rapid Triage Workflow" for IR investigations. I am a prolific speaker, from keynotes to webcasts to conferences, and am actively involved building the cybersecurity community.
“Since no amount of subsequent planning can solve a problem insufficiently understood, framing the problem is critical.” ~USMC Planning Guide
A few external posts:
- M365 Investigations with SOF-ELK: https://www.blackhillsinfosec.com/wrangling-the-m365-ual-with-powershell-and-sof-elk-part-1-of-3/
- Disabling M365 Direct Send: https://www.blackhillsinfosec.com/disabling-m365-direct-send/
- OSINT for IR: https://www.blackhillsinfosec.com/osint-for-incident-response-part-1/
- M365 BEC Workflow: https://www.youtube.com/live/NoIeluVIEeE?si=fxlWx_UcZ93S2hHV