John Uhlmann

John Uhlmann is a seasoned security research professional currently serving as Principal Security Research Engineer at Prelude since June 2025, having previously held the same title at Elastic from April 2021 to June 2025, where noteworthy contributions included the development of provenance-enriched ETW-TI call stacks. With extensive experience at the Australian Signals Directorate from February 2004 to April 2021, John acted as the ACSC Technical Director for Host-Based Discovery, focusing on APT hunting and situational awareness strategies, while also contributing to R&D efforts for novel detection methods. John's earlier roles at the Australian Signals Directorate included staff positions in security research, engineering, and analysis, as well as a background in software development. Educational qualifications include a Master of Software Engineering and a Bachelor of Science (Honours) in Computer Science, both from The Australian National University. Additionally, John has been a speaker at prominent cybersecurity conferences such as Black Hat Asia and various BSides events.