Get an iPad with Online Courses Now!



Philip Hagen

  • Certified Instructor
  • Affiliation: Red Canary, Inc.
  • Twitter: @PhilHagen

Philip Hagen has over fifteen years of experience in information security, running the including deep technical tasks, management of an entire computer forensic services portfolio, and executive responsibilities.

Currently, Phil is the CEO at Red Canary, where he oversees the development and growth of their managed threat detection service, which minimizes the time between a compromise and detection. This helps to support faster and more decisive remediation of network-based intrusions.

Phil started his security career while attending the US Air Force Academy, with research covering both the academic and practical sides of security. He served in the Air Force as a communications officer at Beale AFB and the Pentagon. In 2003, Phil shifted to a government contractor, providing technical services for various IT and information security projects. These included systems that demanded 24x7x365 functionality. He later managed a team of 85 computer forensic professionals in the national security sector. He has provided forensic consulting services for law enforcement, government, and commercial clients prior to taking on the lead role at Red Canary. Phil is also a certified instructor for the SANS Institute.

Listen to Phil discuss "IT'S ALIVE!!! Investigating with Network-based Evidence" in this SANS webcast that every DFIR professional should listen to.

Upcoming Courses Taught By Philip Hagen
/ Location

Training Event
SANS Bangalore 2014 Bangalore, India
Sep 15, 2014 -
Sep 27, 2014

Training Event
SANS Network Security 2014 Las Vegas, NV
Oct 19, 2014 -
Oct 27, 2014

Oct 20, 2014 -
Oct 25, 2014

Community SANS
Community SANS Rochester Rochester, MN
Oct 27, 2014 -
Nov 1, 2014

Training Event
SANS Sydney 2014 Sydney, Australia
Nov 10, 2014 -
Nov 22, 2014

Training Event
SANS DFIRCON West 2015 Monterey, CA
Feb 23, 2015 -
Feb 28, 2015

*Course contents may vary depending upon location, see specific event description for details.