Thomas M.

Key Skills

Software

No software listed

Top Subject Matter

Cybersecurity threat hunting and incident analysis

Incident response and digital forensics

Legal Services & Contract Review

Top Data Types

Text

Document

Top Task Types

Function Calling

Freelancer Overview

Security Operations & Threat Hunting (M.S. Cybersecurity, University of Tulsa). Brings 12+ years of professional experience across complex professional workflows, research, and quality-focused execution. Core strengths include Splunk and Wireshark. Education includes Master of Science, University of Tulsa (2026) and Bachelor of Arts, Oral Roberts University (2014). AI-training focus includes data types such as Text and labeling workflows including Evaluation, Rating, and Function Calling.

Labeling Experience

Incident Response & Digital Forensics (M.S. Cybersecurity, University of Tulsa)

TextFunction Calling

Built and applied NIST 800-61 aligned incident response playbooks to structure detection, containment, eradication, recovery, and lessons learned. Performed malware triage and forensic analysis using network and endpoint inspection tools to support investigation outcomes. Generated consistent analysis artifacts for case documentation, including observations about suspicious PowerShell payloads and obfuscation. • Created incident response playbooks following NIST 800-61 lifecycle stages. • Analyzed malware artifacts and suspicious process execution chains. • Investigated encoded PowerShell payloads, Base64 obfuscation, and LOLBin abuse. • Examined DNS/HTTP traffic patterns to identify command-and-control indicators.

2023 - Present

Security Operations & Threat Hunting (M.S. Cybersecurity, University of Tulsa)

Text

Conducted threat hunting and log analysis by examining telemetry and generating structured findings for suspicious activity and indicators of compromise. Mapped observed behaviors to MITRE ATT&CK tactics and techniques to support incident analysis and reporting. Produced investigation notes and triage outputs based on analysis of Windows event logs, Sysmon telemetry, and command-line artifacts. • Used Splunk and Elastic Security to analyze logs and identify anomalies. • Investigated Windows Event Viewer and Sysmon telemetry for malicious execution patterns. • Identified persistence mechanisms and potential log tampering. • Documented attacker behavior aligned to MITRE ATT&CK for reporting.

2023 - Present

Education

Work History