JR Aquino
Director of Security Operations
Actions
JR has a rich history of building security departments and security programs for some of the largest and highly regulated cloud service providers in the industry. He is currently the Director of Security Operations at Ubisoft.
Prior to his current role, JR led the MSRC Security Incident Response team for Microsoft’s Cloud and AI Division which includes Azure and Dynamics 365. At Citrix Systems he established the security program for the GoTo Products (GoToMeeting, GoToMyPC, GoToWebinar). At LCOGT, JR architected the global network of robotic telescopes controlled over the internet for scientific astronomy research.
Just-in-time Oubliette: Dynamic Forensic Evidence Collection Infrastructure
Tools Demo for Just-in-time Azure-based infrastructure for securely storing and accessing forensic evidence. This environment is intended to be useful for when you have multiple investigators or untrusted external parties adding data for evaluation. Some key features automatically implemented in this setup leverage the immutable Azure Storage legal hold, Read-only/Write-only SAS Tokens, Azure Storage analytics logging for validation of access by which parties, Azure Key Vault logging with the logs going to a Log Analytics workspace in the resource group.
Incident Handler's Guide to Notifications
Breaches, data leaks, misconfigurations, increasingly strict laws and regulations have become common enough for IR Teams to require notification strategies. You may be proficient at investigating forensic details, reading packet captures, and analyzing memory dumps but do you have the skills and preparation to write customer notifications of a breach? Can you help translate the details of an incident to your legal team to author the public notice on your website of a personal data leak? If you are part of an Security Incident Response team and want to get ahead of the curve for your media cycle, join us in reviewing the Incident Responders' Guide to Notifications.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top