Jordan Bourcier

I am an experienced SOC (Security Operations Center) Analyst and Cyber security Engineer. On a daily basis I conduct triage of security events that are generated by our in-house SIEM solution that draws data from all well known security products including Sentinel One, Microsoft Defender, Crowdstrike, Carbon Black and many others. I also perform deep technical analysis of security events to uncover root cause and develop new detection techniques.

I was recently Acknowledged in an Arctic Wolf threat labs report for my role in uncovering an attack on a recently released CVE. https://arcticwolf.com/resources/blog/arctic-wolf-observes-threat-campaign-targeting-palo-alto-networks-firewall-devices/.

I also took third place in an IR (Incident Response) challenge at a cyber security conference in UT utilizing Sentinel One and native windows tools.

Cyber security is my passion and I consider myself to be a life long student. I continually look for ways to increase my knowledge and skill set either through online learning platforms such as Hack the Box and Try Hack Me or through my extensive home lab.

• Wifi Beacon Stealer - This is a tool that will listen for wifi beacons and then spin up an evil twin Wifi network, respond to the beacon request, and then capture the the WPA password hash, All without victim interaction.
• Website scraper - A tool that looks for links going to cloud storage such as amazon S3 buckets or Azure blob storage. Speeds up the process of finding clients externally facing assets.
• Subdomain finder - This is an internal tool that pulls down all the top level domains for a client and then loops through them to gather all subdomains utilizing the security trails API.
• Port checker - Pulls all the outbound server ports for a clients environment over the last week and matches them to known bad ports ie 4444 ect...
• Ip checker - Pulls all outbound traffic server IP's and checks their reputation for known or suspected malicious IP's.
• Wordpress plugin enumerator - Gets vulnerable plugins from Wordfence and then checks to see if they are in use in a clients wordpress site.
• C2 framework built on python and C - (work in progress).