Stories from an Expert Threat Hunter with Taz Wake

Stories from an Expert Threat Hunter with Taz Wake

by SANS Institute

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 SANS Institute 👥 70K 📅 May 8, 2026 ⏱ 42 min 👁 455 📄 expert opinion 🧭 2026-08-15
Available in: English (current) Français

Keywords

incident responsethreat huntingdwell timecybersecurityexpert insights

Summary

In this episode of Cyber Leaders, hosts Ciaran Martin and James Lyne interview Taz Wake, a Digital Forensics & Incident Response expert with a background in military intelligence. Wake shares his journey from the military to cybersecurity, highlighting the evolution of the field. He discusses the importance of incident response, emphasizing the need for technical skills, communication, and a genuine interest in problem-solving. He explains threat hunting as a proactive defense measure, noting that dwell time has decreased significantly due to improved detection. Wake also touches on the impact of AI on cybersecurity, suggesting that while tools evolve, the human element remains crucial. The conversation covers real-world examples, including a social engineering attack where a user’s life savings were nearly stolen, and the importance of community and trust in the industry. The episode concludes with insights on the adversarial mindset and the value of experience in defending organizations.

148 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information is high, as it provides practical insights from an experienced professional. Wake’s arguments are well-founded, drawing on his extensive background and real-world incidents. He effectively communicates the nuances of incident response and threat hunting, offering actionable advice for practitioners. The discussion on dwell time and AI’s impact is particularly valuable, as it contextualizes current trends. The argumentation is solid, though it relies on anecdotal evidence and industry statistics without formal citations.

85 words

Title / Content Match

The title accurately reflects the content, which focuses on Taz Wake's experiences and insights as a threat hunter and incident responder.

Quality & Reliability

8/10

The content is based on the extensive practical experience of Taz Wake, a recognized expert in incident response and threat hunting. The discussion is grounded in real-world scenarios and industry statistics, though it lacks formal citations and is presented as an informal conversation.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • SANS Institute — Mentioned as the backing organization and provider of courses.
  • Mandiant — Referenced for statistics on dwell time.
  • CrowdStrike — Referenced for statistics on dwell time.

Concurring Sources

  • SANS Institute — The podcast is hosted by SANS, and Taz is a SANS instructor, aligning with their educational mission.

Contribution & Novelties

The episode provides unique insights from an expert with a military intelligence background, offering a distinct perspective on incident response and threat hunting. It emphasizes the human element in cybersecurity and the importance of communication and curiosity. The discussion on dwell time and AI’s impact is timely and relevant.

Pour aller plus loin :

  • Incident Response — Background on incident response methodologies.
  • Threat Hunting — Overview of threat hunting concepts.
  • Dwell Time — Definition and significance of dwell time in cybersecurity.
  • SANS Institute — Provider of cybersecurity training and certifications.

90 words

Radar Profile

The radar profile shows high scores in quality of information and reliability, reflecting the expert's credibility. The quantity of information is moderate, and the technical level is accessible to a broad audience. The overall profile indicates a balanced and trustworthy discussion.

Reliability 8/10

💬 No comments were provided for analysis.