Olaf Hartong
Co-founder And Defensive Specialist at FalconForce
Utrecht, Utrecht, Netherlands
Summary
🤩
RockstarOlaf Hartong is a defensive security specialist and co-founder of FalconForce with 11 years of experience blending blue and purple team operations, network engineering, and security transformation. A Microsoft MVP and former Deloitte Specialist Leader, he focuses on translating attacker tradecraft into practical detection and monitoring improvements. His hands-on work includes refining Sysmon configurations to capture nuanced events like clipboard changes and process tampering, showing a knack for squeezing more visibility from endpoint telemetry. Based in Utrecht, he pairs consultancy-scale delivery experience with startup grit, bridging high-level risk advisory and deep technical implementation. Notably, his background in photography and media production hints at an uncommon attention to detail and storytelling in incident analysis.
11 years of coding experience
8 years of employment as a software developer
Github Skills (11)
powershell10
dfm10
dfu10
sys10
security-scan10
dfd10
dfa10
security10
mitre-attack9
att9
xml8
Programming languages (14)
Github contributions (5)
olafhartong/sysmon-modular
Jan 2018 - Jan 2023
A repository of sysmon configuration modules
Role in this project:
Security Engineer
Security EngineerContributions:29 reviews, 524 commits, 79 PRs in 5 years
Contributions summary:Olaf contributed to the development of Sysmon configuration modules, focusing on tailoring event logging for security purposes. Their work included modifying the `Merge-SysmonXml.ps1` script to incorporate updates for Sysmon schema versions, add event types like `FileDeleteDetected` and `ClipboardChange` and implement exclusion policies. They also worked on enhancing the configuration to support features related to process tampering and improved DNS and remote thread logging. The user's contributions indicate an active role in refining the system monitoring capabilities.
security-toolsconfigurationsysmondfirmitre-attack
olafhartong/DefenderHarvester
Oct 2023 - Feb 2025
Expose a lot of MDE telemetry that is not easily accessible in any searchable form
Contributions:4 releases, 1 review, 6 PRs in 1 year 4 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.