Intelligence-Driven Incident Response, 2nd Edition

About the Authors

Rebekah Brown has spent more than two decades working in the intelligence analysis community. Her previous roles include NSA network warfare analyst, operations chief of a US Marine Corps cyber unit, and US Cyber Command training and exercise lead. She has helped develop threat intelligence and security awareness programs at the federal, state, and local levels, as well as at multiple Fortune 500 companies.

Scott J. Roberts is a security leader, analyst, software developer, and author. He is head of Threat Research for Interpres Security and has led security teams and projects in the defense industrial base and at GitHub, Apple, Splunk, and most recently, Argo AI. He is also a student and researcher at Utah State University, where he is focused on anticipatory intelligence, tackling emergent problems in national security and cybersecurity. Scott has served on an advisory committee for SANS CTI and DFIR Summits. Along with Rebekah Brown, he authored Intelligence-Driven Incident Response (O’Reilly) and has spoken at numerous industry events on incident response and cyber threat intelligence. He is passionate about improving security via automation, especially on macOS, and developing open- and closed-source tooling in Python, Go, and Swift.