Tony Cook is a Senior Security Architect for the TBG Security. In this capacity, Tony is responsible for delivering holistic incident response services using state of the art host and network based technologies. Using these technologies, combined with advanced methodologies, Tony is able to assist clients obtain situational awareness and rapidly identify threats as part of tactical response to intrusions involving sophisticated adversaries that target intellectual property and other critically sensitive data. In addition, Tony performs threat research and develops content / techniques that can be used by clients to identify compromise and mitigate risk.

Mr. Cook has been in the digital forensics field for almost 15 years, mostly dedicated to network intrusions and data breach investigations. Throughout his career, he has been called upon to assist in investigating domestic and international incidents where both government and corporate networks were compromised, including incidents where large amounts of PII or PCI data was targeted.

Prior to joining TBG, Tony served as a Principal Consultant on the RSA Incident Response team for 3 years performing cyber and intelligence analysis for multiple corporate clients and federal agencies. He has functioned in both cyber security operations and the cyber research community to address day-to-day challenges as well as those of the future.

Prior to this, Tony worked at the Space and Naval Warfare Center (SPAWAR) where he was the lead for Incident Response. In this role he conducted complex computer forensic examinations to support investigations that included network intrusions including Nation State Actors. Tony also served as the Division Officer/SME of Malware Analysis & Media Forensics for the Department of the Navy as well as a Senior Security Engineer for NASA.

Tony is currently involved in multiple intelligence sharing organizations that distribute relevant information and samples of ongoing attacks.

Tony currently holds a Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Cisco Certified Network Associate (CCNA) and the following certifications from SANS: GIAC Certified Forensic Analyst (GCFA),