About me
Kelsey (w0mbat) is a cybersecurity analyst focused on detection, investigation, and response, with an emphasis on cases where activity appears legitimate but is not. Her work spans endpoint, identity, and email telemetry, specializing in identifying subtle indicators of compromise and improving detection quality without increasing noise.
She regularly investigates complex incidents under real-world constraints, correlating signals across systems to determine scope and impact. She has presented at BSides Austin and CactusCon.
Outside of investigations, she is often found mentoring analysts, refining detection logic, or watching an unhealthy amount of anime, not necessarily in that order.