Heresh is a Senior Solution Architect in the Truesec CSIRT, specializing in Network Forensics and Network Infrastructure Recovery. With over 100 incidents to his credit, he brings extensive experience in investigating and recovering from large-scale ransomware attacks. In these incidents, his responsibilities include understanding the compromised environment, analyzing communication flows, containing the network, and leading rebuild efforts. He also conducts in-depth investigative analysis of network configurations, logs, and traffic captures, with a focus on identifying initial access, lateral movement, and data exfiltration.