Renzon Cruz

Renzon is the Technical Director of Incident Response at Unit 42, where he leads large-scale, high-profile investigations involving nation-state attacks, ransomware incidents, and threat actor negotiations. Previously, he worked for a national cybersecurity agency in the Middle East. Renzon is a contributor to The DFIR Report and the co-founder of GuideM, a leading cybersecurity training provider in the Philippines. He is also an active contributor to Xintra APT Labs while also sitting at the CFT board, and has spoken at DEFCON, Underground Economy, BSides London/Qatar, NorthSec, Deepsec, ROOTCON.

What year did you join The DFIR Report?
2023

Fun fact
Renzon is a three-time consecutive champion of SANS DFIR NetWars (2021–2023) and is proudly listed as a “Lethal Forensicator” on the official SANS website. He also coaches UnitGG, the team that won the Hack4Gov competition and now represents the Philippines as the country’s official Capture-the-Flag (CTF) team. Outside of his professional life, Renzon enjoys traveling the world and exploring new cultures.