Will S.

About Will S.

Will is an researcher/offensive engineer at SpecterOps and performs a variety of offensive services including red team engagements, security research, and offensive tool development. He is a co-founder of the Veil-Framework, GhostPack, Empire/EmPyre, Nemesis, and BloodHound. He developed PowerView and PowerUp, was an active developer on the PowerSploit project, and is a former Microsoft PowerShell/CDM MVP. He also co-developed and published the \"Certified Pre-Owned\" Active Directory Certificate Services research and whitepaper.He has presented at a number of security conferences including DEF CON, Black Hat (USA and Europe), ShmooCon, DerbyCon, Troopers, BlueHat Israel, PSConfEU, and several Security BSides conferences on topics spanning AV-evasion, post-exploitation, Active Directory, red team tradecraft, machine learning topics, and (offensive) PowerShell. He also previously co-developed and taught the \"Adaptive Red Team Tactics\" and \"Advanced PowerShell for Offensive Operations\" Black Hat training classes, and is the previous architect for the \"Adversary Tactics: Red Team Operations\" Black Hat course (https://specterops.io/how-we-help/training-offerings).He has a strong computer science background with a security focus, a masters in information security from Carnegie Mellon University and experience at two of the leading cybersecurity research labs in the country, Sandia National Labs and SEI/CERT. He is also certified as an Offensive Security Certified Professional (OSCP) and an Offensive Security Certified Expert (OSCE).

Experience

1. Principal Security Researcher

   SpecterOps

   Jan 2022 — Present · Seattle, WA, US

   Researches offensive + defensive tradecraft and helps expand the BloodHound attack graph.Performed various work of offensive AI/ML approaches and offensive applications.Helped build the Nemesis offensive data analysis platform, and is a part of the small team that developed the NTLM attack edges for BloodHound. Prototyped GitHub attack modeling for BloodHound. Executes boutique offensive engagements in his specific expertise area.

Education

• The University of Texas at Austin

  Bachelor's Degree, Computer Science

  2005 — 2009

• Carnegie Mellon University

  Master's Degree, Information Security Policy and Management

  2009 — 2011