Thomas Diot

Thomas is the lead IR analyst at CERT-W. He's conducted IR engagements on medium and large perimeters, sometimes in coordination with others internal/institutional/ commercial CSIRTs. He also works on security audits on a wide range of subjects, with a specialty in Active Directory pentests and Red Team.

Thomas has spoken at various seminars on AD or DFIR:

• AD hacking and security best practices for a major French bank
• CERT introduction for graduate students
• Forensics internal formation

Speaker / Contributor: This individual participates in SANS events, presentations, written content, or other community resources as an external contributor. They are not a SANS employee, instructor, or affiliate.