I would add that actor-centric threat intelligence (ACTI) specialists would also benefit from understanding FIEs potentially linked to apex cyber threat actors. The idea of ACTI sounds to me like an analogue to CI referent: dedicated to being hyper aware of how very specific threats behave and think, and serving as resource to support their team members during both IR and threat hunting.

Written by

Open source counterintelligence referent. Views here are personal, not my employer’s. All original content © Alex Orleans, 2014–2021.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store