Spencer Alessi is a Senior Penetration Tester at SecurIT360 and Microsoft MVP (Security – Identity & Access). A former sysadmin turned pentester, he focuses on the intersection of offense and defense: how internal attackers move, how Active Directory and Windows misconfigurations create “free” attack paths, and how admins can harden environments without breaking production. He’s known for practical demos, concrete remediation steps, and a style that keeps serious topics engaging. Spencer has delivered conference sessions and webinars on topics like dangerous logon scripts, insecure Active Directory permissions, and real-world AD/Windows misconfigs.