An incident responder and the Zeek project's most enthusiastic operational user (contributing from 2007), he co-founded Corelight to turn his operational insights into a network-security product.