Robert M. Lee
Professor
CEO at Dragos, Inc
Specialities
Industrial Control Systems Security, Digital Forensics and Incident Response
Connect with Robert

About Robert
Robert M. Lee sets the standard for modern industrial defense. A SANS Fellow and CEO and Co-Founder of Dragos, Inc., Robert is the author of SANS ICS515: ICS Visibility, Detection, and Response, lead author of SANS FOR578: Cyber Threat Intelligence, and co-author of SANS ICS310: ICS Cybersecurity Foundations. He brings real incidents, clear models, and hands-on labs to every class, showing not just how adversaries operate, but how defenders win.
Press & Media
Recognitions
- U.S. House Homeland Security — Written Testimony: “Fully Operational: Stuxnet 15 Years Later and the Evolution of Cyber Threats to Critical Infrastructure”
- Business Wire — “Dragos CEO Robert M. Lee to Address Global Audience at the World Economic Forum”
- World Economic Forum — “Why using IT cybersecurity to protect OT puts industrial organizations at risk”
- RSA Conference — “Inside the Five Most Dangerous New Attack Techniques: In-Depth SANS Expert Analysis”
- The CyberWire — Control Loop Notes: “OT disruptions and Volt Typhoon”
- CyberScoop — “Volt Typhoon targeted emergency management services, per report”
- YouTube — S4 Events: “PIPEDREAM: Most Flexible & Capable ICS Malware to Date”
- WIRED — “The Colonial Pipeline Hack Is a New Extreme for Ransomware”
- E-ISAC / Dragos — “CRASHOVERRIDE: Analyzing the Threat to Electric Grid Operations”
- National Security Archive — “Analysis of the Cyber Attack on the Ukrainian Power Grid”
