Jonathon Poling has over a decade of experience in Network Security Monitoring, Digital Forensics, and Incident Response. Serving in a variety of roles within the government, contractor, and private sectors, he has built and honed his DFIR expertise in all the major operating systems, most recently focusing on AWS. He is most at home on the *nix command line, performing the large majority of DFIR using solely FOSS tools.