<img class="aligncenter wp-image-21740 size-full" src="https://ancient.cybermaterial.com/wp-content/uploads/2021/01/Mathias-Fuchs.png" alt="Responders should not rush to kick" width="1200" height="800" /> <blockquote><span class="JsGRdQ">"Responders should not rush to kick an attacker out before they’ve got the full picture of what they were looking at and what has been exfiltrated." </span><strong><span class="JsGRdQ">Mathias Fuchs - SANS Institute Instructor</span></strong></blockquote> Source: <strong>https://www.sans.org/profiles/mathias-fuchs/ </strong> <p style="text-align: justify;"><strong>About Mathias Fuchs: </strong></p> <p style="text-align: justify;">"Renaissance man" may be the most fitting description of SANS instructor Mathias Fuchs, who is the Head of Investigation & Intelligence at the Swiss firm InfoGuard AG as well as a volunteer paramedic and a pilot.</p> <p style="text-align: justify;">Mathias began his career teaching Linux administration and general IT security and quickly moved into penetration testing and red teaming. As his skills improved (and as breaking into customer systems got more repetitive and less demanding), Mathias sought new challenges that would expand his IT security acumen. So, he moved over to digital forensics and incident response, a field where the attacker unintentionally sets the pace and partly controls what an investigator needs to do - rather than that being dictated by the customer or the investigator.</p> <p style="text-align: justify;">"Any well-funded advanced persistent threat group makes sure that an investigator never runs out of new challenges," Mathias notes. <span class="JsGRdQ">Responders should not rush to kick out an intruder. </span></p> <p style="text-align: justify;">The exciting pace of the field continues to inspire Mathias. "As an investigator, you get to see the newest kinds of attacks and the best malware available," he explained, adding that he also is constantly expanding his knowledge base as he learns about each customer's business.</p> <p style="text-align: justify;">At InfoGuard, Mathias is focused on building the incident response practice. He uses his knowledge and experience to shape his team and proactively mediate pitfalls that are more difficult to change later. Taking on these challenges gives him perspective as a SANS instructor, as many students are still getting up to speed and are in the initial phases of preparing their organization to address potential threats.</p> <p style="text-align: justify;">Prior to InfoGuard, Mathias was a principal consultant at Mandiant, where he led large-scale cybersecurity investigations all over the world. Before that, Mathias served as a lead security architect at Deutsche Telecom subsidiary T-Systems while working in tandem as a security consultant for international clients in the telecommunications, automotive, pharmaceutical, and petroleum industries.</p>