In this episode of Signals & Stories, host Kali Fencl sits down with Vertex Project analysts Ryann "Reign" Hallback, Jen "The Silence" Kolde, and Mary Beth "Savage" Lee to explore the investigative mindset behind threat intelligence work.
The conversation goes beyond indicators and malware to examine how experienced analysts approach uncertainty, evaluate evidence, and determine whether a lead is worth pursuing. The team discusses the importance of context, how to separate signal from noise, why confidence should be backed by evidence, and the cognitive biases that can derail an investigation.
They also share lessons learned from years of intelligence work, including common mistakes analysts make, the challenges of proving attribution, the role of malware in investigations, and why skepticism is one of the most valuable skills an analyst can develop.
Whether you're a seasoned intelligence professional or just starting your cybersecurity journey, this episode offers a candid look at the thought processes that drive effective investigations.
In this episode:
Where investigations really begin
How analysts decide what is worth pursuing
The difference between signal and noise
Why context matters more than a single indicator
The risks of over-relying on malware families
Common mistakes analysts make
How Synapse helps analysts connect disparate data sources
The importance of showing your work and validating conclusions
Podden och tillhörande omslagsbild på den här sidan tillhör
The Vertex Project. Innehållet i podden är skapat av The Vertex Project och inte av,
eller tillsammans med, Poddtoppen.
