Marvin Ngoma
Marvin is a seasoned consultant and security architect. He has a strong passion for helping nordic and baltic organizations succeed in their cybersecurity programs. He has led many projects in both the private and public sectors, architecting and building Security Operations and Intelligence capabilities; unifying tools, processes, and people. Prior to joining Elastic, Marvin worked as a security consultant at IBM and was the primary SME for QRadar in the nordics and baltics.
In addition to his work with clients, Marvin frequently speaks at conferences, summits, and meetups on the latest security topics, making him a dedicated security evangelist. He holds a masters in Computer Science & Engineering from Chalmers University of Technology in Sweden, and is a very proactive member of ISC2, among other security bodies.
Session
Sign-up form: Google forms
Scattered Spider redefined modern ransomware operations through sophisticated social engineering, privilege escalation, and rapid domain-wide compromise. In this immersive workshop, participants experience the attack from both perspectives: first as the attacker, then as the defender.
Working through a realistic breach simulation, you'll execute key phases of the attack before switching roles to detect, investigate, and respond using modern detection and endpoint security capabilities. By the end of the workshop, you'll understand not only how the attack works, but why defenders succeed, or fail, at each stage.
You'll learn:
How Scattered Spider gains initial access and escalates privileges.
How to detect and investigate each stage of the attack.
Where traditional defenses fall short.
How modern security operations and AI-assisted investigation can reduce time to detection and response.