John Doyle
Certified InstructorGlobal Lead of Custom Threat Intelligence Training at Mandiant Threat Intelligence Services
Specialities
Digital Forensics and Incident Response

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsDigital Forensics and Incident Response

John has over 20 years of experience working in Cyber Threat Intelligence (CTI), Digital Forensics, Cyber Policy, and Security Awareness and Education. John is the Director of CTI Services at Palo Alto Networks’ Unit 42. He’s previously worked at Mandiant helping clients evaluate their CTI programs, build program roadmaps, and upskills team capability and reach. John has a background in tracking intrusion activities from Russian, North Korean, and emergent cyber threats from his decade plus working at the Central Intelligence Agency (CIA). Lastly, he is a Certified Instructor for SANS FOR578: Cyber Threat Intelligence course.
Here are upcoming opportunities to train with this expert instructor.
Review relevant educational resources made with contribution from this instructor.