Group Purchasing
Group Purchasing

Mick Douglas

Principal InstructorManaging Partner at InfoSec Innovations

Specialities

Cyber Defense, Offensive Operations

Mick Douglas

About Mick Douglas

For more than two decades, Mick Douglas, a hands-on practitioner, teacher, and community mentor, has helped thousands of defenders sharpen their craft, turning complex detection, response, and intelligence concepts into clear, repeatable methods that build confidence and capability. His students learn to see patterns others miss, anticipate adversaries’ next moves, and apply tested frameworks that work under pressure.

As a Principal Instructor for the SANS Institute, Mick teaches three cornerstone courses: SEC504: Hacker Tools, Techniques, and Incident Handling, SEC555: Detection Engineering and SIEM Analytics, and SEC497: Practical Open-Source Intelligence (OSINT). As Managing Partner at InfoSec Innovations, he leads consulting engagements that help organizations strengthen defenses and build resilient detection programs. Whether analyzing adversary behavior, developing detection pipelines, or guiding open-source investigations, Mick emphasizes curiosity and disciplined experimentation as the foundation of defensive excellence. 

A believer in practical, tool-driven learning, Mick developed open-source resources such as Powercat, a PowerShell reimagining of Netcat that teaches defenders to understand offensive tradecraft from the inside out. His publications, including “Social Engineering Security into Your Business” and “Intro to Powercat,” reflect that same philosophy—empowering professionals to think critically about attacker behavior, automation, and human factors. Mick Douglas is also a faculty member of the SANS Technology Institute, an NSA Center of Academic Excellence in Cyber Defense and multi-year winner of the National Cyber League competition. His recent work applies AI-assisted techniques to streamline detection and investigation workflows, helping defenders evolve alongside emerging threats.

Mick’s classes are known for their energy, realism, and humor—he combines live demonstrations, storytelling, and guided experimentation to make complex concepts stick. As he often reminds his students, “If cybersecurity feels too hard, you’re probably doing it the hard way.” Beyond his courses, Mick mentors aspiring analysts and community contributors, helping them turn curiosity into confidence. His tools and talks have influenced thousands of defenders worldwide, reflecting his belief that knowledge only matters when it’s shared. Outside of work, he enjoys hiking, photography, and sailing; reminders that perspective and patience are as vital to security as technical skill. For Mick, teaching is about passing the torch, helping every defender discover that security done well can be as creative and rewarding as it is technical.

Qualifications Summary

Press & Media

More From Mick

  • PowercatNetcat implementation in PowerShell 2.0 to allow maximum portability on all PowerShell enabled hosts.
  • Pause-ProcessPowerShell script which allows one to pause/unpause a running application. Makes use of existing OS functionality so there is no need to install any additional components. Can be used to allow defenders to respond at a lower threshold.
  • FantasticThis is a visualizing tool made by InfoSec Innovations for exploring computer networks. It aims to provide a way for network security novices and professionals alike to find and fix security issues.