Tony Cook
Head of Threat Intelligence, DFIR,
GuidePoint Security
Tony Cook is the Head of Threat Intelligence on GuidePoint Security’s consulting team, where he manages digital forensics and incident response engagements on behalf of the company’s customers. His career background includes high-level national security activities in cybersecurity operations for several clients over various verticals.
Previously Tony was a DFIR Director and led the Threat Intelligence team at Palo Alto/The Crypsis Group. Before that he was a principal consultant for RSA NetWitness where he managed teams of consultants responding to incidents, hunting advanced persistent threats, penetration testing, and helping clients harden their networks against attack. During his time at RSA he helped several SOCs mature their threat hunting capabilities from non-existent to fully established successful hunt teams.
Additional experience includes being the Cybersecurity Operations Architect and IR Director at the network security operations center of the Space and Naval Warfare Systems Center (SPAWAR), and as a Malware Analysis and Digital Forensics officer at the Naval Cyber Defense Operations Command.
Tony has also managed forensics and incident response at the U.S. Joint Forces Command and has worked as a security engineer for Raytheon at NASA’s Langley Research Center. He began his career with the Navy, where he served as lead system administrator on the USS Enterprise. He holds a bachelor’s degree in information security from Colorado Technical University, as well as a broad range of certifications in IT security.
