About
Luke Brown
My first job was upgrading a hospital from Windows 2000 to Windows XP. Since
then, I've briefed a sitting Prime Minister on a zero-day from his private cabin
at 30,000 feet, conducted one-man purple team operations, and contained cyber
incidents with live attackers - from Australia to the Middle East. I'm currently
a Senior Security Solutions Architect at ExtraHop Networks, where I dive into
packets daily, consult into client incident response teams as a network forensics
specialist, and deliver threat hunting and SOC uplift engagements focused on
network detection and response.
I'm particularly interested in the intersection of decrypted network data and
AI-augmented forensics, and I feel fortunate to work at exactly that intersection
at ExtraHop.
Education
Master of Cybersecurity in Digital Forensics with Excellence
Nov 2025
UNSW Canberra at the Australian Defence Force Academy
| Subject | Result |
|---|
| Wireless, Mobile and Internet of Things Security | High Distinction |
| Mobile and Network Forensics | High Distinction |
| Digital Forensics | High Distinction |
| Software Security Lifecycle | High Distinction |
| Information Assurance and Security | Distinction |
| Cyber Offence | Distinction |
| Reverse Engineering Malware | Distinction |
| Cyber Defence & Network Security Operations | Distinction |
ISC2
CISSPCertified Information Systems Security Professional (CISSP)
Jan 2024
ISC2 ID 1197885 · Verification GIAC Certifications
GX-FE GIAC Experienced Forensic Examiner #117
Dec 2025 GCFE GIAC Certified Forensic Examiner
Dec 2025 GSP GIAC Security Professional #453
Apr 2025 GX-FA GIAC Experienced Forensic Analyst #114
Apr 2025 GCFA GIAC Certified Forensic Analyst
Dec 2024 GX-IH GIAC Experienced Incident Handler #346
May 2023 GCIH GIAC Certified Incident Handler
Jan 2023 GCED GIAC Certified Enterprise Defender
Jan 2022 GSEC GIAC Security Essentials
Aug 2021 GIAC Boards & Committees
GIAC GIAC Scheme Committee
Jan 2026 GIAC GIAC Advisory Board
Aug 2021 SANS Training
FOR500 Windows Forensic Analysis
Nov 2025 SEC670 Red Teaming Tools: Developing Windows Implants, Shellcode, C2
Nov 2024 FOR508 Advanced Incident Response, Threat Hunting, and Digital Forensics
Nov 2024 SEC504 Hacker Tools, Techniques, and Incident Handling
Nov 2022 SEC501 Advanced Security Essentials: Enterprise Defender
Nov 2021 SEC401 Network, Endpoint, and Cloud Security
Mar 2021 SANS / GIAC analyst page →
Cloud Security
Xintra Attacking and Defending Azure & M365 Transcript → Mar 2025 SC-401 Microsoft Certified Information Security Administrator
Mar 2025 SC-200 Azure Security Operations Analyst Transcript → Jul 2022 Red Team / Penetration Testing
HackTheBox Pro Hacker + Prodigy Rank Profile → Jul 2024 Incident Response Labs (Xintra)
Airbuzzed: Lazarus APT Emulation
Mar 2025 KG Distribution: Memory Forensics Lab
Dec 2024 Techtonik Inc: APT29 modifying code in the pipeline
Jul 2024 Waifu University: AlphV (BlackCat) ransomware on a university network
Mar 2024 Xintra transcript →
Security Frameworks
Essential Eight Assessment Course (ASD / TafeCyber) Credential → Jan 2024 Non-technical
First Aid Accredited
Nov 2024 Mental Health First Aid Accredited
Nov 2022 Enclosed Space Training
Aug 2015 Legacy
ITILv3 ITIL v3 Foundations
Aug 2010 MCDST Microsoft Certified Desktop Support Technician: Windows XP
May 2007 MCP Microsoft Certified Professional
May 2007