About
Hi, I’m Aurélien 👋
I’m a Senior Incident Responder specialising in DFIR and threat hunting, based in Belgium. For more than 9 years, I’ve been helping organisations detect attacks, understand how they happened, and regain control when an incident strikes.
This blog is where I share hands-on write-ups from the field: malware analysis, incident response techniques, forensic artefacts, detection engineering and threat hunting. Expect practical content, real commands, and IOCs you can actually use.
Background
My career began in the networks of the Belgian Defence, first as a network technician and then as a cybersecurity analyst, working on detection and security monitoring in high-security environments.
I then moved into incident response, investigating many incidents, including large-scale ransomware attacks. Today I work in the financial sector, within a global incident response team.
I’ve also defended 5,000+ systems at Locked Shields, the world’s largest live-fire cyber defence exercise, and served on the EU Cyber Rapid Response Teams (CRRT).
Certifications
- Expert level (GIAC): GSE #433, GSP, GX-PT, GX-IH, GX-IA, GX-CS
- Forensics, detection & response: GCIH, GCIA, GCDA, GNFA, GBFA, BTL1, HTB CDSA, CCD / CCDL2
- Offensive: GPEN, GAWN, CRTO, HTB CPTS
- Specialties: Ransomware negotiation, Blockchain analysis (Chainalysis), GSEC
Speaking
- DFIR at the speed of a Velociraptor
- Barbhack 2025, Toulon, France
- Hackfest 2025, Quebec, Canada
- Unlock Your Brain 2025, Brest, France
Need help?
Through Cyber Horizon, I help businesses with:
- Incident response and ransomware support
- Digital forensics and Microsoft 365 & Azure investigations
- Threat hunting & compromise assessment and penetration testing
- Training and awareness
More about my background on cyberhorizon.be/about.
📧 info@cyberhorizon.be · 💼 LinkedIn
Opinions expressed on this blog are my own and do not reflect those of my employer.