Show Notes
In this episode of Signals & Stories, host Kali Fencl sits down with Vertex Project analysts Ryann "Reign" Hallback, Jen "The Silence" Kolde, and Mary Beth "Savage" Lee to explore the investigative mindset behind threat intelligence work. The conversation goes beyond indicators and malware to examine how experienced analysts approach uncertainty, evaluate evidence, and determine whether a lead is worth pursuing. The team discusses the importance of context, how to separate signal from noise, why confidence should be backed by evidence, and the cognitive biases that can derail an investigation.
They also share lessons learned from years of intelligence work, including common mistakes analysts make, the challenges of proving attribution, the role of malware in investigations, and why skepticism is one of the most valuable skills an analyst can develop.
Whether you're a seasoned intelligence professional or just starting your cybersecurity journey, this episode offers a candid look at the thought processes that drive effective investigations.
In this episode: Where investigations really begin How analysts decide what is worth pursuing The difference between signal and noise Why context matters more than a single indicator The risks of over-relying on malware families Common mistakes analysts make How Synapse helps analysts connect disparate data sources The importance of showing your work and validating conclusions
https://vertex.link/10-year-anniversary
#CyberSecurity #ThreatIntelligence #CTI #CyberThreatIntel #APT1 #InformationSecurity #ThreatAnalysis #CyberPodcast #TheVertexProject
Join our community: Slack LinkedIn Twitter/X Bluesky
More from Signals & Stories
For the final episode of this season of Signals & Stories, we’re going back to where the series began with Vertex Project co-founders visi and John “whippit” Rodgers.
What happens when the people building intelligence software work side-by-side with the analysts actually using it?
How do you know when intelligence is actually trustworthy?
Every cyber threat intelligence analyst eventually encounters a few uncomfortable truths.
Even the most experienced cyber threat intelligence (CTI) analysts aren't immune to cognitive bias. In this episode of Signals & Stories, the team explores some of the most common analytical pitfalls that can quietly influence investigations and how strong analytical tradecraft helps avoid them.