Phil Groce is a senior network-defense analyst in the Situational Awareness Team in the SEI CERT Division Monitoring and Response Directorate. Groce’s areas of technical expertise are systems and software development in the service of enterprise network activity monitoring and incident response. Before joining the SEI in 2005, Groce helped develop network-intrusion prevention, managed-security, and mail-security capabilities at CipherTrust (later part of McAfee) and SecureWorks (later Dell Secureworks).