Presentations, Talks, & Research

This page is a collection of past presentations, talks, webinars, and other publications. For a complete list, please find me on LinkedIn.

NB: For various reasons, I can only make available material that was created for and presented in public forums (e.g. conferences). I won’t make private or internal sessions available here.

Presentations

• What Actually Matters in the First 60 Minutes of DFIR Triage - Exterro INFORM 2026
• What’s Really Happening in OT Cyberattacks (in 2025!) — Australian Cyber Conference (Melbourne 2025)
• Process Code Injection – Detection, Response, and Mitigation — SANS Webcast
• Securing OT in Transport and Logistics — Dragos, Inc., (Slides)
• Cybersecurity Roundtable Group Discussion & Exercise — Cyber & Infrastructure Security Conference
• Contemporaneous Note Taking and Sausage Dogs: How Taking Notes Will Save Your Life — PancakesCon 4
• Fundamental First Steps in Industrial Rapid Response — Dragos, Inc.
• Responding to Ransomware in ICS — AISA Cyber Conference
• E-MIMICS: Extended Malware in Modern ICS — SANS ICS Security Summit
• A Brief History of ICS Cyberattacks

Whitepapers & Research

• Incident Response for Operational Technology (OT) Whitepaper — Dragos, Inc.
• From Chaos to Capability: A Roadmap for Developing Practical Incident Response Programs — Lykos Defence
• How to Prepare for & Respond to Ransomware in OT Environments Whitepaper — Dragos, Inc.
• The Value of Contemporaneous Notes and Why They Are a Requirement for Security Professionals — SANS Reading Room
• Evidence of Data Exfiltration via Containerised Applications on Virtual Private Servers — SANS Reading Room

Book

• Cybersecurity for Small Networks: A No-Nonsense Guide for the Reasonably Paranoid — No Starch Press

Bylines, Media, and Other Publications

• Op-Ed: Dragos Industrial Ransomware Analysis — Q4 2022 — Cybersecurity Connect
• Op-Ed: ICS/OT Threat Landscape – 2022 Year in Review — Cybersecurity Connect
• Safeguarding Civilisation: Protecting Critical Infrastructure Against Cyberattacks — Intelligent CISO

If you’re looking for a speaker for your event, visit the Speaking page for topics, formats, and booking information.