About
I help organizations detect, understand, and respond to modern cyber threats, with a…
Activity
5K followers
-
Maxim Deweerdt shared thisJoin me in AMS for the very first run of SEC559: Identity Security for Hybrid and Cloud! 😎🚀🚀🚀Maxim Deweerdt shared thisWe're just a few week away from SANS Amsterdam August 2026! From 24–29 August, Amsterdam will host Europe’s leading cybersecurity professionals for an unforgettable week of hands-on training, expert insights, and valuable networking. We have seven world class courses running at the event including the new SEC559- Identity Security for Cloud and Hybrid BETA. See full list below - 🔹 SEC559 – Identity Security for Cloud and Hybrid (BETA) - with Maxim Deweerdt 🔹 FOR508 – Advanced Incident Response, Threat Hunting, and Digital Forensics - with Adam Harrison 🔹 SEC511 – Cybersecurity Engineering: Advanced Threat Detection and Monitoring - with the amazing Eric Conrad 🔹 FOR578 – Cyber Threat Intelligence - with Andreas Sfakianakis 🔹 SEC530 – Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise - Andy Smith & Krisztian Muller 🔹 SEC549 – Cloud Security Architecture - with Jason Larkin 🔹 LDR516 – Strategic Vulnerability and Threat Management - with Jonathan Risto P. Eng Location: Amsterdam Marriott Hotel, Amsterdam, The Netherlands (also available Live Online) Date: 24–29 August 2026 In addition to the training course and labs and exercises. SANS Amsterdam provides attendees with the opportunity to connect, learn, and challenge yourself through evening talks, social evenings and the legendary SANS NetWars Tournament. To learn more about SANS Amsterdam August and to register for this event please visit. : https://lnkd.in/ezBnteYj #CyberSecurity #SANSInstitute #Amsterdam2026 #ThreatHunting #ZeroTrust #LeadershipLeadership
-
Maxim Deweerdt reposted thisMaxim Deweerdt reposted thisI remember the exact moment I realized traditional network monitoring doesn't mean much in the cloud: I was staring at a wall of unstructured API logs, trying to figure out if an anomalous IAM event was from a sophisticated attacker or just an engineer doing a late-night deployment. I spent way too much time drowning in data lakes and chasing false positives because I didn't know what actual cloud malicious activity looked like in the data. I wish I had a course back then that showed me how to cut through the noise, build effective detection engineering pipelines, and hunt for threats across AWS and Azure with confidence. It would have saved me countless hours of firefighting. That’s exactly why I love teaching SEC541. It’s the practical playbook for turning overwhelming cloud logs into actionable threat intelligence and high-fidelity alerts. If you're ready to stop guessing and start catching attackers in your cloud infrastructure, join me at the Cloud Security Exchange Summit this August (in San Francisco or live online). Secure your seat for the SANS event here: https://lnkd.in/gDdNYRgD Check out the course syllabus for SEC541: Cloud Security Threat Detection at sans.org/sec541
-
Maxim Deweerdt shared thisIt's done. After more long days than I care to count, SANS Institute SEC559: Identity Security for Cloud and Hybrid is finished and live. Really proud of this one. Big thanks to Ethan Bowen and Christos Gourzoulidis, I couldn't have done it without you two. Short version of what it's about: attackers don't kick the door in anymore, they just log in. SEC559 teaches you to detect, govern and respond to identity attacks across human, workload and AI agent identities, over the full identity lifecycle. We're running two discounted beta rounds, one on each side of the Atlantic, and there are only a few seats left: • Amsterdam, 24–28 Aug 2026 • Las Vegas, 21–25 Sep 2026 Both 25% off while they're in beta. Grab one while you can: sans.org/sec559 Now… time to crack a bottle. 🥂
-
Maxim Deweerdt shared thisDon’t miss this!Maxim Deweerdt shared thisWoah! I was able to convince SANS Institute to offer tickets for just $50 to join us in person at the AI-focused Cloud Security Exchange event in San Francisco. Double woah! The agenda looks incredible. So much AI and cloud security. ✅ An Update from the Scaling Laws Frontier with Jason Clinton from Anthropic ✅ Agentic Security: Detection and Response at Machine Speed from Amazon Web Services (AWS) ✅ Security Architecture for Autonomous AI Systems from Microsoft Azure ✅ Applying Zero Trust to Secure AI and Agent Infrastructure from Google Cloud Security ✅ Real-World AI and Cloud Integration Failures ✅ Trusting Agentic AI in the Cloud SOC ✅ Infrastructure Hardening for Scalable Agentic AI ✅ Decoding Identity Context to Catch Identity Abuse ✅ Automated Attack Simulation in Cloud Pipelines There are also hands-on workshops covering: 🛠️ Investigating AI Threats from Amazon Web Services (AWS) 🛠️ Cloud Security Agentic SOC from Google Cloud 🛠️ Your New Tier-1 Analyst Isn't Human: Lessons from Building an Autonomous SOC from Microsoft To register for the $50 price use the code Cloud_Promo50 Just go to the "Summit Registration Only" portion of this page: https://go.sans.org/VRXDnt Look forward to seeing you in San Francisco! Thanks to all our speakers: Eric Johnson | Gee Rittenhouse | Dave Shackleford | Wesley (Wes) Kuzma | Chris Cochran | Angelica Faber | Lydia G. | Alejandro Aucestovar | Jason Kao | Zach S. | Leo Meyerovich | Jon Zeolla | Kenneth G. Hartman | David Hazar | Ryan Nicholson | Simon Vernon | Dakota Riley | Jason Lam | Kevin Garvey And special thanks to our advisory board: Bailey Bercik | Chris Hughes | Christina Morillo | Gourav Nagar | Kat Traxler | Rich Mogull SANS Cloud Security #AI #AIsecurity #cloud #cloudsecurity #cyber #cybersecurity #security #CloudSecNext #SANSSummit #SANSCloudAce
-
Maxim Deweerdt reposted thisMaxim Deweerdt reposted thisMaster the detection, investigation, and remediation of identity-based attacks across Microsoft Entra ID, Active Directory, and hybrid environment from OAuth token abuse and compromised service principals to Kerberos escalation and ungoverned AI agent identities. Build the skills to break attack paths before they reach tenant-wide compromise and strengthen Zero Trust across your entire identity control plane. SANS Network Security. Beta, Sept 21–25. Hope to see you there! 🔗 https://lnkd.in/eER3AcBr #Cybersecurity #IdentitySecurity #ZeroTrust #MicrosoftEntraID #IAM
-
Maxim Deweerdt shared thisVery proud to share that my RSAC 2026 presentation "Chasing Ghosts: Detecting Token Abuse in the Microsoft Cloud" has been marked as top rated by the RSA attendees! If you're interested in how to detect token abuse, you can watch the recording of my talk here: https://lnkd.in/ePggyp8X If you really want to build the skills to detect, govern, and respond to identity-based attacks across the full identity lifecycle: SANS Institute and me are launching the brand new SEC559: Cloud & Hybrid Identity Security course: https://lnkd.in/e9WxSgYB. Hope to see you soon! NVISO Security SANS Cloud Security
-
Maxim Deweerdt shared thisSo… I just spent an hour on a SANS webcast trying to convince a few hundred SOC analysts that the next "user" logging into their tenant might not be a user at all. It might be an agent. 🤖 Or more precisely: an Entra ID Agent Identity, minted on-demand by an Agent Identity Blueprint, sometimes wearing an Agent User costume so it can show up in Teams chats like it belongs there. Yes, those are three different things - and treating them like a regular service principal will not work... A few things I had much fun explaining on "Agent Identities: from Detection to Response": 🧬 Why a compromised blueprint is basically a supply-chain incident for every agent it ever spawned 🎟️ Why agent identities don't have passwords (and why that's actually good news for once) 🚨 What the new identity-driven alerts look like when your non-human workforce starts misbehaving 🛑 How to contain an agent without breaking the business process behind it Huge thanks to the SANS Cloud Security team for having me, and to everyone who showed up with questions sharp enough to keep me honest. 🙏 https://lnkd.in/e-gxfp7V If your SOC playbooks still assume every identity has a human behind it… we need to talk. 😄 SANS Institute NVISO Security
-
Maxim Deweerdt reposted thisMaxim Deweerdt reposted thisJust wrapped up the recording of the SANS Institute keynote on Entra Agent Identities by Maxim Deweerdt. I’ll be honest...it was a bit of a reality check. We spend so much time securing human users, but the way we've been handling "non-human" workloads is a massive blind spot. A few things that clicked for me from this session: 1.)The "Before" Mess: We used to manage secrets and certs manually for every single app. It’s a governance nightmare when you have autonomous agents that might only exist for a few minutes before disappearing. 2.)The "Blueprint" Factory: This is the move. Instead of manual setups, you use a Blueprint (a master template) to "mint" identities on demand. 3.)Separation of Duties: There's now a clear line between the "Installer" (the Blueprint Principal) and the "Worker" (the Agent Identity). The installer just provisions things; it doesn’t actually call your data APIs. This makes it way easier for the SOC to spot when something looks "off" in the audit logs. 4.)No More Passwords: These runtime identities use access tokens issued by the platform, not passwords. It's one less secret to worry about leaking in a script. It’s all about moving toward "Identity-as-Code" and bridging that gap between technical automation and real governance. #CyberSecurity #EntraID #IAM #SANS #AIGovernance #CloudSecurity
-
Maxim Deweerdt reposted thisMaxim Deweerdt reposted this👏 Great week collaborating with Microsoft and our partners! We’ve spent the past days deep-diving into the latest innovations and upcoming roadmap for Microsoft Sentinel—exchanging insights, aligning on priorities, and exploring what’s next in security operations. A particular highlight was Erik Van Buggenhout sharing our vision on the 𝗮𝗴𝗲𝗻𝘁𝗶𝗰 𝗦𝗢𝗖, which we believe will be 𝗵𝘂𝗺𝗮𝗻-𝗹𝗲𝗱 𝗮𝗻𝗱 𝗮𝗴𝗲𝗻𝘁-𝗼𝗽𝗲𝗿𝗮𝘁𝗲𝗱. While a lot of focus is currently on the raw power of the model, we believe the conversation should be about properly 𝗮𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝗶𝗻𝗴 𝘁𝗵𝗲 𝘄𝗼𝗿𝗸𝗳𝗹𝗼𝘄𝘀 𝗮𝗻𝗱 𝗲𝗻𝘀𝘂𝗿𝗶𝗻𝗴 𝗮𝗴𝗲𝗻𝘁𝘀 𝗮𝗿𝗲 𝗽𝗿𝗼𝗽𝗲𝗿𝗹𝘆 𝗴𝗿𝗼𝘂𝗻𝗱𝗲𝗱 𝗶𝗻 𝗰𝗼𝗺𝗽𝗮𝗻𝘆 𝗰𝗼𝗻𝘁𝗲𝘅𝘁. Proud to have such a strong NVISO team representing our side: Erik Van Buggenhout, Maxim Deweerdt, Alexandros R., Mirko Hacker, Leon Birk, Giannis Androulakakis & Jeroen Laureys 🤝 And a big thank you to our Microsoft counterparts for the collaboration: Maria Thomson and Michael Palitto,. Looking forward to bringing these insights back to our clients and continuing to strengthen our joint approach to cybersecurity. 🚀 #MicrosoftSentinel #CyberSecurity #ThreatDetection #SecurityOperations #SOC #MicrosoftSecurity #CloudSecurity #PartnersInTech #CyberDefense #SecurityInnovation #TeamWork #Collaboration #NVISO
-
Maxim Deweerdt liked thisMaxim Deweerdt liked thisWe're just a few week away from SANS Amsterdam August 2026! From 24–29 August, Amsterdam will host Europe’s leading cybersecurity professionals for an unforgettable week of hands-on training, expert insights, and valuable networking. We have seven world class courses running at the event including the new SEC559- Identity Security for Cloud and Hybrid BETA. See full list below - 🔹 SEC559 – Identity Security for Cloud and Hybrid (BETA) - with Maxim Deweerdt 🔹 FOR508 – Advanced Incident Response, Threat Hunting, and Digital Forensics - with Adam Harrison 🔹 SEC511 – Cybersecurity Engineering: Advanced Threat Detection and Monitoring - with the amazing Eric Conrad 🔹 FOR578 – Cyber Threat Intelligence - with Andreas Sfakianakis 🔹 SEC530 – Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise - Andy Smith & Krisztian Muller 🔹 SEC549 – Cloud Security Architecture - with Jason Larkin 🔹 LDR516 – Strategic Vulnerability and Threat Management - with Jonathan Risto P. Eng Location: Amsterdam Marriott Hotel, Amsterdam, The Netherlands (also available Live Online) Date: 24–29 August 2026 In addition to the training course and labs and exercises. SANS Amsterdam provides attendees with the opportunity to connect, learn, and challenge yourself through evening talks, social evenings and the legendary SANS NetWars Tournament. To learn more about SANS Amsterdam August and to register for this event please visit. : https://lnkd.in/ezBnteYj #CyberSecurity #SANSInstitute #Amsterdam2026 #ThreatHunting #ZeroTrust #LeadershipLeadership
-
Maxim Deweerdt liked thisMaxim Deweerdt liked thisNext Thursday, July 30, I’ll be presenting on one of the most important attack patterns defenders need to understand today: a real hybrid identity compromise. In this SANS Institute webinar, we’ll walk through how the attack moves from on-prem Active Directory into Microsoft Entra ID, why the sync server and other trust anchors matter so much, and what defenders can do to break the chain before it becomes cloud control. This session is also part of our brand new course, SEC559: Identity Security for Cloud and Hybrid. See you there! 👉 https://lnkd.in/dgtDUq8H #SANS #hybrididentity #entraid #identitysecurity #cloudsecurityHybrid Identity Under Attack: A Walkthrough of the Storm-0501 Chain | SANS InstituteHybrid Identity Under Attack: A Walkthrough of the Storm-0501 Chain | SANS Institute
-
Maxim Deweerdt liked thisMaxim Deweerdt liked thisView my verified achievement from GIAC Certifications.GIAC Machine Learning Engineer (GMLE) was issued by Global Information Assurance Certification (GIAC) to Raghu Subash Narapareddy.GIAC Machine Learning Engineer (GMLE) was issued by Global Information Assurance Certification (GIAC) to Raghu Subash Narapareddy.
-
Maxim Deweerdt liked thisMaxim Deweerdt liked thisAnd we are LIVE! Introducing: Tradecraft Academy. Our on-demand training platform for practitioner-led, hands-on offensive and defensive security training. So what's the catch? None! Sign up to get started with one of three brand new, free courses: https://lnkd.in/dpR4kpzS 👈
-
Maxim Deweerdt liked thisMaxim Deweerdt liked thisWie zijn de mensen die dagelijks het verschil maken bij Conclusion Mission Critical? In ons format 'In de Spotlight' leren we hen beter kennen. Vandaag is het de beurt aan Vlad M.! 🔒 𝗔𝗮𝗻 𝗵𝗲𝘁 𝗿𝗼𝗲𝗿 𝘃𝗮𝗻 𝗼𝗻𝘀 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆𝗱𝗼𝗺𝗲𝗶𝗻 Vlad werkt bijna vijf jaar bij Conclusion Mission Critical. Eind 2025 startte hij als Expert Lead Security, verantwoordelijk voor de richting die we in security opgaan. Hij bepaalt de securityvisie, ontwikkelt nieuwe ideeën en deelt onze expertise met klanten en de markt. 💡 𝗥𝘂𝗶𝗺𝘁𝗲 𝗼𝗺 𝘁𝗲 𝗴𝗿𝗼𝗲𝗶𝗲𝗻 Wat Vlad bij CMC waardeert? De ruimte om initiatief te nemen en nieuwe dingen te leren. Een belangrijk moment daarin was zijn deelname aan het talentprogramma The Connection. "Daar heb ik veel over mezelf geleerd én soft skills ontwikkeld die ik nog dagelijks gebruik. 🇳🇱 𝗘𝗲𝗻 𝗡𝗲𝗱𝗲𝗿𝗹𝗮𝗻𝗱𝘀𝗲 𝗺𝗶𝗷𝗹𝗽𝗮𝗮𝗹 Vlad is oorspronkelijk afkomstig uit Roemenië en woont sinds 2010 in Nederland. Vorig jaar werd hij officieel Nederlander. "Iets waar ik stiekem best trots op ben!” #ConclusionMissionCritical #InDeSpotlight #Security
-
Maxim Deweerdt liked thisMaxim Deweerdt liked thisWist je dat wij naast onze begeleiding bij uitvaarten ook graag voor je klaarstaan bij andere bijzondere momenten? ✨ Ceremoniebegeleiding, voor momenten die betekenisvol, persoonlijk en onvergetelijk mogen zijn. 🎤 Spreker op jouw feest of evenement, met een warme, persoonlijke en betrokken aanpak. Of het nu gaat om een afscheid, een bijzondere ceremonie, een feestelijke gelegenheid of een evenement, wij helpen graag om van elk moment iets bijzonders te maken. 📩 Benieuwd wat we voor jou, jouw familie, organisatie of evenement kunnen betekenen? Neem gerust contact met ons op. #uitvaartbegeleiding #ceremoniebegeleiding #spreker #evenement #feest #persoonlijk #verbinding #bijzonderemomenten
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Education
-
Howest University College
-
-
-
-
-
-
-
-
Licenses & Certifications
Volunteer Experience
-
President
Rotaract Mandeleie
- 6 years
Social Services
Rotaract is an international organisation of service clubs for youngsters from 18 to 30 years old. Rotaract is subtracted from the words Rotary and Action, which means that rotaract is a program from rotary international (www.rotary.org) and commits itself for social projects. The international goal of Rotaract is to help fight the social and material needs of the society we live in.
http://www.mandeleie.be/
Publications
-
So Many Ducks, So Little Time
SANS Threat Hunting & Incident Response Summit 2017
Threat hunting is time consuming, costly and highly specialized”. The authors of this talk
aim to completely contradict this statement and show you that you can start threat hunting
with minimal time investment by leveraging free tools and clever techniques. While the
need for proactive threat identification is getting traction within the security industry,
many still see this as something that can only be achieved by investing in intelligent (and
expensive) threat hunting…Threat hunting is time consuming, costly and highly specialized”. The authors of this talk
aim to completely contradict this statement and show you that you can start threat hunting
with minimal time investment by leveraging free tools and clever techniques. While the
need for proactive threat identification is getting traction within the security industry,
many still see this as something that can only be achieved by investing in intelligent (and
expensive) threat hunting software. Starting with baselining a subset of the systems in your
environment and automating analysis through scripting, the authors were able to start their
threat hunting efforts on a 4-hour budget. They will show you how they developed their
methods and achieved quick wins. During the session, hands-on tips and lesson learned will
be provided. A demonstration will show you how you can easily start looking for anomalies
in your environment and uncover luring threats on a very small budget.Other authors -
Courses
-
Datacenter Technology
-
-
Networking
-
-
P1 Security Reverse Engineering for Telecom Security
TS-310
-
SANS Advanced Digital Forensics, Incident Response, and Threat Hunting
FOR508
-
SANS Continuous Monitoring and Security Operations
SEC511
-
SANS Hacker Tools, Techniques, Exploits and Incident Handling
SEC504
-
SANS Network Penetration Testing and Ethical Hacking
SEC560
-
Security
-
Projects
-
Allianz AGN (Accenture)
- Present
Allianz has deployed a grand-scale implementation of VoIP. As a Support Engineer, I am responsible for the site surveys of telephones and server rooms. In a second phase I will be helping with the implementation and installation on site.
Personal scopes of the project:
- Site Surveys (IP-phones, Comms room)
- Installation of Voice Gateways
- Patching
- Rack & Stack
- IOS upgrades
- On-site contact with customer
- Staging, installation and decommissioning
-…Allianz has deployed a grand-scale implementation of VoIP. As a Support Engineer, I am responsible for the site surveys of telephones and server rooms. In a second phase I will be helping with the implementation and installation on site.
Personal scopes of the project:
- Site Surveys (IP-phones, Comms room)
- Installation of Voice Gateways
- Patching
- Rack & Stack
- IOS upgrades
- On-site contact with customer
- Staging, installation and decommissioning
- Cutover
- TroubleshootingOther creators -
Honors & Awards
-
Best Intership Project
Howest University College
During the graduation ceremony, I received the price for the best intership project for my successfull ISO27001 project @ Elster EnergyICT.
-
Laureate Best Concept Small Business Project
Vlajo
Our SBP, TravelButler, has won an honourable second place in the national contest in search of the best concept Small Business Project. We developed an all-in-one application to help travellers book and follow-up their travel plans. Our project got the formal attention of Thomas Cook and we are currently looking for means to go live with our project.
http://www.nmct.be/opleiding/nieuws/easy-lion-en-travel-butler-vlajo-sbp-finale/
Languages
-
Dutch
Native or bilingual proficiency
-
German
Professional working proficiency
-
English
Full professional proficiency
-
French
Limited working proficiency
Organizations
-
ISSA
Member
- PresentMembership #: 22072150
Other similar profiles
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore More