Kevin Mandia
The Incident Response Industry
Mandiant, and the APT1 report that named the unit
Rating
88Impact score
Domains
Incident responseThreat attributionForensics
Scouting report
Founded Mandiant in 2004 and built breach response into a business that governments and Fortune 100 boards call at 2am. In 2013 the company published APT1, a report attributing years of intrusions to a specific People’s Liberation Army unit with building photographs and operator handles — the moment public, named attribution became something private companies did.
Curator’s note
Made attribution a commercial deliverable instead of a classified one.
Portrait
Painted from a photograph of Kevin Mandia by Ballistic Ventures, supplied by the subject.
Sources
- 01Mandiant en.wikipedia.org
- 02APT1: Exposing One of China’s Cyber Espionage Units (2013) mandiant.com