Group Purchasing
Group Purchasing

Rob T. Lee

FellowChief AI Officer and Chief of Research at SANS Institute

Specialities

Artificial Intelligence, Digital Forensics and Incident Response

Connect with Rob T.

Rob Lee

About Rob T. Lee

Rob T. Lee is Chief AI Officer and Chief of Research at SANS Institute, where he advises boards, CISOs, and government leaders on how to govern, deploy, and defend AI at scale. He authored the SANS Secure AI Blueprint, which organizes secure AI adoption around Protect AI, Utilize AI, and Govern AI, and led development of the SANS Critical AI Security Guidelines. He co-authored The AI Vulnerability Storm: Building a Mythos-Ready Security Program and the initial post-mortem of the OpenAI/Hugging Face breach.

Rob created the original SIFT Workstation, pioneered the use of forensic timeline analysis, and coined the terms DFIR (digital forensics and incident response) and CTI (cyber threat intelligence). His recent work includes Protocol SIFT, an experimental initiative testing how AI can help trained responders triage investigations, and FIND EVIL!, the first hackathon for autonomous AI incident response. Rob’s career spans government, industry, and academia. A U.S. Air Force officer and founding member of the first information warfare unit, he later served with the NSA and CIA before becoming Director of Threat Intelligence and Threat Hunting at Mandiant, where he co-authored the first M-Trends report. Rob serves as a Technical Advisor to the Foreign Intelligence Surveillance Court, has authored flagship SANS courses, co-developed GIAC certifications, and trained more than 100,000 professionals. He speaks at conferences including RSA Conference and AI4 and has appeared in The Wall Street Journal, CNN, Forbes, Wired, Rolling Stone, and Security Magazine.