Phish Perfect: How I broke the thing while trying to protect it.
2025-10-22 , Europe

As a junior SOC analyst, you're responsible for protecting users from potential phishing attacks, so naturally, I did what any overly eager newbie would do, little did I know, internal threats are very much real and they not all stem from malicious intent.


  • SOC analyst or internal threat? When the call is coming from inside the house.
  • Cast and crew: All the people involved, including the lady who nagged me and I didn't even work directly with.
  • An oblivious girl's guide to threat hunting and phishing: Incident narrative.
  • Save your tears for another day: Owning up to your screw ups.
  • Embracing the suck: Lessons learned.

Melina Phillips is an Offensive Security Engineer with a background in Security Operations and Incident Detection. She has over ten years of IT experience and six years working directly in cybersecurity, blending hands on blue team work with her current focus on adversary simulation and endpoint compromise.

Her recent talks have been featured at Bsides Cambridge, Security Fest, BruCon and LeHack. She's known for making complex technical concepts accessible without watering them down, and for delivering practical insights grounded in real world attack and defense experience.

Outside of breaking into infrastructure and chasing down Linux threats, she's usually at CrossFit or playing with makeup, ideally not at the same time.

This speaker also appears in: