Matt Bromiley is a Senior Principal Consultant with Mandiant. He has worked with both the Managed Defense and Incident Response teams. His experience includes disk, network, and memory forensics, incident handling and remediation. When he is not working to disrupt adversaries, he is often developing content to help other analysts hone their skills. He offers checklists for how small- and medium-sized businesses (SMBs) can identify and clear ProxyLogon Microsoft Exchange infections. He also discusses the top tricks for protecting enterprise environments from ransomware.”]