“Elad is a great mentor with a broad knowledge and passion for security. Excellent time management skills and attention to detail - it is a pleasure and a privilege to work with him. Elad is also a great teacher and I would really recommend any training provided by him.”
About
I am an accomplished and integrity-driven professional with extensive experience across…
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Education
Licenses & Certifications
-
CREST Certified Web Application Tester (CCT-APP)
Council of Registered Ethical Security Testers (CREST)
-
CREST Registered Tester (CRT-PEN)
Council of Registered Ethical Security Testers (CREST)
-
Practitioner Security Analyst (CPSA)
Council of Registered Ethical Security Testers (CREST)
-
-
-
-
-
-
-
-
-
Courses
-
Adversary Tactics: Detection
SpecterOps
-
Adversary Tactics: Red Team Operations
SpecterOps
-
Adversary Tactics: Tradecraft Analysis
SpecterOps
-
Adversary Tactics: Vulnerability Research for Operators
SpecterOps
-
Corelan “Advanced”
-
-
Cracking the Perimeter (CTP)
Offensive Security
-
Creative Red Teaming
Mandiant (@Black Hat USA)
-
Hacking Defined Advanced
See-Security
-
Penetration Testing with Kali Linux (PWK)
Offensive Security
-
Wireless Attacks (WiFu)
Offensive Security
Honors & Awards
-
Presidential Distinguished Service Award
President of Israel
Received the Presidential Distinguished Service Award on Independence Day from the Israeli president, in the presence of the Israeli prime minister and the IDF’s entire general staff, in recognition of my outstanding service
Languages
-
English
Native or bilingual proficiency
-
Hebrew
Native or bilingual proficiency
Recommendations received
2 people have recommended Elad
Join now to viewOther similar profiles
Explore more posts
-
Edward Millington - BSc, CISO, CISSP, ISO, SOC 2, ISSA, MCIIS, MIET
#Safety, #governance, safety! - Where in the system should these be positioned? - What became of #EO13636? ⚠🚨 The criticality of #cni is deadly important (it cannot be overstated) and should not be ignored due to the lack of action. It is really time for governments and CNI Operators to start activities to build CNI Resilience, reduce attack surfaces, and, worst case scenario, reduce knowing and unknowing deaths and consequences. "....the agency will review its security measures and improve cybersecurity after the investigation, which he said is being led by the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency." #criticalinfrastructureprotection #securityleadership https://lnkd.in/eUMNkKuy
-
Shakeel Ali
Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor: Progress Software has released security updates for a maximum-severity flaw in LoadMaster and Multi-Tenant (MT) hypervisor that could result in the execution of arbitrary operating system commands. Tracked as CVE-2024-7591 (CVSS score: 10.0), the vulnerability has been described as an improper input validation bug that results in OS command injection. "It is possible for unauthenticated, remote https://lnkd.in/gmtFwfFR
-
Rohit Agnihotri
Identity Deception in ITDR - Yes this is the old Honey Pots concepts There is another interesting concepts in ITDR called as Identity Deception, it is conceptually similar to honeypots used in networking. Both involve creating decoy elements designed to attract and engage potential attackers Honey Accounts: These are fake user accounts created within identity stores (like Active Directory) that are designed to attract attackers. When an unauthorized user attempts to access these accounts, it triggers alerts and allows security teams to respond quickly. Honeytokens: These are deceptive credential profiles placed in identity caches on endpoints. They serve as early warning signals when accessed by unauthorized users, helping to identify potential breaches before they escalate These identities should be known to your ITDR systems though, this is not a way of checking which ITDR tool is more effective. https://lnkd.in/e7ckJxGQ #TheIdentityNavigator #iam #ITDR #IdentityAndAccessManagement
2 Comments -
Peter Prizio Jr.
Read all about our VP of SA Jordan Camba talk about his experience as a Detection Engineer and Threat Hunter. "As a Detection Engineer and Threat Hunter, my passion for MITRE ATT&CK is boundless. It's an essential framework for assessing, measuring, and communicating the breadth and depth of our detection capabilities. However, the utility of MITRE ATT&CK is often compromised by inaccuracies and a lack of precision in how some organizations apply mappings. This can lead to a distorted understanding of our security posture, ultimately misallocating resources and weakening our defenses." Read more in his latest blog here: https://lnkd.in/e7CzWazn Why Precision and Accuracy Matter in MITRE ATT&CK Mappings - - Accuracy ensures that the tactics, techniques, and sub-techniques correctly represent the detected activities, providing a clear and reliable view of our security landscape. Inaccurate mappings can lead to confusion and misplaced focus, undermining the integrity of threat detection efforts. - - Precision, on the other hand, involves the granularity of these mappings. It's about capturing the specific details that make detections actionable. A lack of precision can leave us with a general, but not necessarily useful, understanding of potential threats. Here are some common mistakes: ❌ Mapping without sub-techniques ❌ Overlapping techniques ❌ Incorrect technique assignments How to fix these mistakes? Follow a few simple rules: 1. Keep it simple - Focus on what is immediately observable and mapto Sub-Techniques where possible. 2. Don't be greedy - Not all techniques can be detected with logs and telemetry and not every detection needs a Technique/Sub-Technique. 3. Become a better threat researcher - Improve your ability to find, interpret, and understand research on malware, tools, techniques, and vulnerabilities and instantiate a lab environment. At SnapAttack, we are committed to refining the quality of these mappings. Our platform offers: ✅ Pre-Written Tested Detections: A growing library of Sigma rules tested in our Sandbox sessions, with accurate ATT&CK mappings. ✅ MITRE ATT&CK Prioritization & Coverage Reporting: Using top-tier Threat Intelligence, we prioritize techniques and sub-techniques according to industry and regional relevance. ✅ Research Sandbox: A tool for hands-on-keyboard research to enhance threat detection capabilities. #CyberSecurity #ThreatDetection #MITREATTACK #SnapAttack #DetectionEngineering #ThreatHunting #CyberDefense #SecurityPosture #AccuracyAndPrecision
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore MoreOthers named Elad Shamir
-
Elad Shamir
Head FTL Europe at Dr. Reddys Laboratories
-
Elad Shamir
CEO Kinneret Innovation Center // agritech, climatech, water tech.
-
elad shamir
Food Production Professional
-
Elad Shamir
senior Director at I.V.A ( Israel Volunteer Association)
6 others named Elad Shamir are on LinkedIn
See others named Elad Shamir