Episode 4: How Analysts Think During an Investigation

In this episode of Signals & Stories, host Kali Fencl sits down with Vertex Project analysts Ryann "Reign" Hallback, Jen "The Silence" Kolde, and Mary Beth "Savage" Lee to explore the investigative mindset behind threat intelligence work.

The conversation goes beyond indicators and malware to examine how experienced analysts approach uncertainty, evaluate evidence, and determine whether a lead is worth pursuing. The team discusses the importance of context, how to separate signal from noise, why confidence should be backed by evidence, and the cognitive biases that can derail an investigation.

They also share lessons learned from years of intelligence work, including common mistakes analysts make, the challenges of proving attribution, the role of malware in investigations, and why skepticism is one of the most valuable skills an analyst can develop.

Whether you're a seasoned intelligence professional or just starting your cybersecurity journey, this episode offers a candid look at the thought processes that drive effective investigations.

In this episode:

• Where investigations really begin
• How analysts decide what is worth pursuing
• The difference between signal and noise
• Why context matters more than a single indicator
• The risks of over-relying on malware families
• Common mistakes analysts make
• How Synapse helps analysts connect disparate data sources
• The importance of showing your work and validating conclusions

https://vertex.link/10-year-anniversary

#CyberSecurity #ThreatIntelligence #CTI #CyberThreatIntel #APT1 #InformationSecurity #ThreatAnalysis #CyberPodcast #TheVertexProject

Join our community:

• Slack
• LinkedIn
• Twitter/X
• Bluesky