Lauren Alston

Cyber Security Consultant @Booz Allen Hamilton

Developed skills involving log reading and analysis through a CySA+ bootcamp. Completed Splunk Threat Hunting training. Conduct research on the viability of Threat Hunting in the Cloud (AWS) at Booz Allen Hamilton. Follow proper Chain of Custody steps for retrieval of a client\'s laptop. Perform laptop hard drive extraction and take a forensic image of the drive with the help of write blockers. Create hunt plans and analytics for the Hunt Analytics Library based on a specific threat actor and/or malware known for distributing ransomware. Onsite Global Recovery and Restoration Perform duties of a site lead and work with the client, counsel, DFIR, and Threat Detection and Response (TDR) to provide onsite aid in the cyber investigation. Attend daily meetings with the client, counsel, DFIR, and TDR and provide the group with an update on the restoration progress. Rebuild servers, domain controllers (DC), Virtual Machines (VMs), ESXi hosts, and reimage workstations to get personnel back onto a clean network to continue daily tasks. Configure new and restored servers to conform with the client’s environment. Run scripts to determine the encryption status of client machines throughout the environment. Educate clients on best password practices according to cyber professionals. Enforce password resets and disable or remove old or unrecognizable accounts listed in Active Directory. Suggest separation of duties amongst Domain Admin accounts and user accounts for all network administrators. Provide clients with necessary assistance around rebuilding their infrastructure. Project Spindletop Developed Splunk Use Cases based on Splunk Security Essentials and presented them to the Spindletop CFC. Created queries based on the level of risk (high, medium, low). Parsed through relevant fields to find useful data to build out use cases. Conducted research on Windows Event Log codes and other relevant attributes to successfully build queries for the client.