Scott Nusbaum

Principal Research Analyst

Experience

Over 14 years of experience in software development and 10 years in Information Security. Experience range from Material Handling, Banking, to the Defense Industry.

Education & Certifications

BS in Computer Engineering and Masters in Computer Science with a focus on Cyber Informatics from the University of Cincinnati. GIAC Reverse Engineering Malware (GREM)

Passion for Security

Scott has always been fascinated with computers and software. He started programming in Elementary and has never stopped. Scott is passionate about learning the internal workings of software and systems. This led to Reverse Engineering, Malware, exploits and CTF.

Recent Blog Posts

Video Blog: Using DLL Persist to Avoid Detection

By Scott Nusbaum

In Incident Response, Incident Response & Forensics

During an Incident Response case, the TrustedSec IR team came across a novel method used by an attacker to maintain access to the target’s servers. After gaining access to the systems, the attacker then modified a DLL required by a service to include malicious code. This video demonstrates a similar process for embedding malicious code...

Read

Become The Malware Analyst Series: PowerShell Obfuscation Shellcode

By Scott Nusbaum

In Incident Response, Incident Response & Forensics, Malware Analysis, Threat Hunting

In this second installment of the ‘Become a Malware Analyst Series,” Principal Incident Response & Research Consultant Scott Nusbaum focuses on PowerShell obfuscation by analyzing a PowerShell sample that was identified during an incident response. Scott will also touch on methods and tools to identify common Metasploit function hashes.

Read

Become The Malware Analyst Series: Malicious Code Extraction and Deobfuscation

By Scott Nusbaum

In Incident Response, Incident Response & Forensics, Malware Analysis, Threat Hunting

In this video, Senior Incident Response & Research Consultant Scott Nusbaum demonstrates a method to extract and deobfuscate code from a malicious document. Upon rendering the code readable, Nusbaum works to gain an understanding of the goals the malware was attempting to accomplish and the processes by which it undertook that effort. This video is...

Read

View all posts from Scott

Recent Webinars

The Ransomware Environment: Going Beyond the Headlines

Join TrustedSec for our latest webinar on Thursday, July 1 at 1PM Eastern Recent attacks on corporations and government agencies to disrupt critical infrastructure have grabbed headlines across the media landscape in recent months. And while these stories capture some...

Watch

View all webinars from Scott