https://security1.win.tue.nl/staff/index.htmlThreat Analysis We study attacker actions in order to support human analysts in finding their traces in log and alert data. This research concerns two overarching topics: Threat Intelligence, which studies attackers in their ecosystem and social engineering frontiers. Security Monitoring in a Security Operations Center, which studies analyst processes and models for log analysis. Staff Expertise Luca Allodi: Investigates attacker operations, economics, and how these are ultimately delivered to the (human) user to improve operational defense capabilities. Emmanuele Zambon: Investigates the security of Industrial Control Systems (ICS) to improve their defense capabilities. Peter Boosten: Networking within the small world called cybersecurity. Roelf Wichertjes: Everything and anything on the operational side of IT. Tom Mulders: Network Intrusion Detection. Sam Baggen: Trying to keep the IT afloat. Permanent StaffHugoen-us