Steven Erwin

Incident Response Consultant

Experience

Steven has over 11 years experience in networking and security and over five years in Incident Response. His industry experience ranges from steel mills and healthcare to small offices and electrical control systems.

Education & Certifications

BS – Information Security Technology – Purdue University

GIAC Network Forensic Analyst (GNFA)
GIAC Certified Forensic Analyst (GCFA)

Professional Affiliations

GIAC Advisory Board

Passion for Security

Steven has always had an interest in computers. He started his career as a network engineer then transitioned into a network security role. That role drove him to learn as much as possible about security. Making sure to learn from everyone around him, he understands that security requires continuous education and training.

Recent Blog Posts

TrustedSec Okta Breach Recommendations

By Tyler Hudak, Justin Vaicaro, Buni Okeke, Leo Bastidas, Nick Gilberti, Steven Erwin, Ashley Pearson and Shane Hartman

In Incident Response, Incident Response & Forensics, Malware Analysis, Security Testing & Analysis, Table-Top Exercises, Threat Hunting

TrustedSec’s Incident Response Team sent urgent communications to all IR retainer clients after the discovery of the compromise of Okta. Below are the recommendations provided with additional updates after reviewing more information on 03/23/2022. On March 22, 2022, the threat group LAPSUS$ announced a successful compromise of Okta, a heavily used identity and access management...

Read

Back to Basics: The TrustedSec Guide to Strong Cyber Hygiene

By Ashley Pearson, Tyler Hudak, Justin Vaicaro, Buni Okeke, Leo Bastidas, Nick Gilberti, Steven Erwin and Shane Hartman

In Incident Response, Incident Response & Forensics, Security Testing & Analysis, Table-Top Exercises, Threat Hunting

Every day, new challenges, attacks, and vulnerabilities are publicized. Just as attackers and the threat landscape are constantly changing, adapting, and evolving, so too must the Blue Teams and defenders who protect organizations against these threats. While the old adage may have been that attacks are rare and unlikely to happen, a new mentality of...

Read

View all posts from Steven

Recent Webinars

Detections and Defensive Insights From the ContiLeaks

Recorded on Tuesday, March 15th, 2022 at 1pm Eastern On February 27, 2022, a cache of chat logs from the notorious ransomware group Conti was anonymously leaked to the public. The leak revealed previously unpublished information about the group’s internal...

Watch

View all webinars from Steven