About
Travis Green — Staff Security Researcher
I’m a staff security researcher at Corelight. My work focuses on network detection engineering — building, testing, and tuning detection rules that catch real threats on real networks.
Core Technical Focus
- Network detection engineering — Suricata and Zeek rule development, signature logic, performance tuning
- CVE research — patch-diffing, lab exploitation, exploitability assessment, detection development
- Malware analysis — threat actor TTP analysis, network indicator extraction, C2 protocol reverse engineering
- Active Directory security — SMB/LDAP/Kerberos protocol detection, lateral movement, domain attack techniques
- Threat hunting — developing and maintaining the TGI HUNT Suricata ruleset
Certifications
- CISSP (Certified Information Systems Security Professional)
- CEH (Certified Ethical Hacker)
- SANS GCIA (GIAC Certified Intrusion Analyst)
Background
I’m a former core team member of the Open Information Security Foundation (OISF), where I led Suricata training and presented internationally, including SuriCon 2017 in Prague. Over 20 years of work spans government and military advisory roles, enterprise security consulting, and hands-on detection engineering. I’ve also mentored high school students in cybersecurity through the CyberPatriot program.
I currently reside in Denver, Colorado.