
Daniel Souter
Daniel Souter is an Incident Response Lead for Sophos. He has investigated over 300 incidents for Sophos' MDR customer base and loves to investigate initial access vectors. Before joining Sophos he wore many hats as a sysadmin and network engineer within multiple organizations. Daniel currently holds multiple cybersecurity certifications, including GCFA and OSCP. In his spare time he loves spending time with his family.
Content by Daniel Souter

Security Operations
Threat Research
Black Basta
Featured
Fin7
Java malware
legitimate service abuse
Microsoft Office 365
python malware
Quick Assist
remote machine management
Sophos X-Ops
STAC5143
stac5777
Teams
Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”
January 21, 2025

Security Operations
Threat Research
Active Adversary
Active Adversary Report
Featured
incident response
RDP
Sophos X-Ops
RD Web Access abuse: Fighting back
June 12, 2024