Training
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
Can't find what you are looking for?

Let us help.

Contact us
Resources
Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations
Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk with an expert

John Doyle

Certified InstructorGlobal Lead of Custom Threat Intelligence Training at Mandiant Threat Intelligence Services

Specialities

Digital Forensics and Incident Response

Connect with John

John Doyle

About John Doyle

John has over sixteen years of experience working in Cyber Threat Intelligence, Digital Forensics, Cyber Policy, and Security Awareness and Education. John is a Principal Intelligence Enablement Consultant for Mandiant, a Google Cloud company, where he helps clients evaluate their CTI programs, builds roadmaps, and upskills team capability and organizational reach. He tracks intrusion activities from Russian and North Korean cyber threat groups. Prior to joining Mandiant, John spent a decade working for the Central Intelligence Agency (CIA) tracking multiple state-sponsored cyber actors (APTs).