Logan Flook

About Logan Flook

I help companies get through their worst days. As a senior incident responder, I dig into endpoints and logs to figure out what happened, stop the bleeding, and leave the environment stronger than we found it.At Kroll, I lead investigations across mid‑market and Fortune‑level organizations, including ransomware, data theft, insider cases, and APTs. My day‑to‑day is forensic triage, scoping, containment planning, tracking threat actor activity, and turning lessons learned into hardening that actually sticks.I am an expert in SentinelOne, CrowdStrike, Carbon Black, and the Eric Zimmerman suite.I’ve spoken at SANS (Top 10 Summit Talk, 2022) and hold GIAC certs in incident response/DFIR, security architecture, and leadership. Lately, I’m focused on raising enterprise incident command maturity and building programs that are defensible and resilient, not just compliant.If you want to compare playbooks or talk shop, I’m always open.

Experience

1. Senior Incident Responder Ii

   Kroll

   Feb 2025 — Present

Education

• SANS Technology Institute

  Bachelor of Professional Studies, Cyber Security

• Community College of the Air Force

  Associate of Arts and Sciences - AAS, Information Systems Technology

  2017 — 2018

• SANS Technology Institute

  Graduate Certificate in Incident Response, Cyber Security

Skills

• Microsoft Office
• Laptops
• Technical Support
• Desktop Computers
• Leadership
• Windows
• Customer Service
• Troubleshooting
• Public Speaking
• Networking
• Research
• System Administration
• Computer Hardware
• Testing
• Active Directory