Episode 7: Hard Cyber Threat Intel Pills to Swallow with Special Guest Nicole Hoffman
Signals & StoriesShow Notes
Every cyber threat intelligence analyst eventually encounters a few uncomfortable truths.
In this episode of Signals & Stories, Kali sits down with Nicole Hoffman, Senior Threat Intelligence Analyst, creator of the Cognitive Stairways of Analysis framework, and author of the Threat Hunter Girl children's cybersecurity series, to discuss the ideas behind her viral "Hard Cyber Threat Intel Pills to Swallow" graphic.
Together, they explore why the graphic resonated so deeply with the CTI community and unpack some of the profession's most enduring challenges: balancing threat research with enterprise intelligence, avoiding panic cycles, writing reports that actually influence decisions, and recognizing that more data doesn't always lead to better intelligence.
Nicole also shares how her perspective has evolved over a decade in threat intelligence—from caring deeply about attribution to focusing on what truly matters for helping organizations assess and reduce risk. Along the way, she offers practical advice for new analysts, explains why tools can't replace analytical judgment, and discusses the communication skills that separate good intelligence from great intelligence.
Topics covered:
- The story behind the viral Hard Cyber Threat Intel Pills to Swallow graphic - Threat research vs. enterprise cyber threat intelligence - Why prioritization is one of the most important analyst skills - Escaping "panic cycles" during major cyber events - Why tools don't make better analysts - The role of attribution in intelligence reporting - Writing concise, actionable intelligence for decision-makers - Advice for analysts entering the CTI field
🔗 Learn more about Nicole and her work: https://threathuntergirl.com
🔗 Explore the full Signals & Stories limited series celebrating 10 years of The Vertex Project: https://vertex.link/10-year-anniversary/
Learn more about The Vertex Project and Synapse: vertex.link
#CyberThreatIntelligence #CTI #ThreatIntelligence #OSINT #Attribution #CyberSecurity #ThreatResearch #SignalsAndStories #TheVertexProject #Synapse
Join our community: Slack LinkedIn Twitter/X Bluesky
More from Signals & Stories
For the final episode of this season of Signals & Stories, we’re going back to where the series began with Vertex Project co-founders visi and John “whippit” Rodgers.
What happens when the people building intelligence software work side-by-side with the analysts actually using it?
How do you know when intelligence is actually trustworthy?
Even the most experienced cyber threat intelligence (CTI) analysts aren't immune to cognitive bias. In this episode of Signals & Stories, the team explores some of the most common analytical pitfalls that can quietly influence investigations and how strong analytical tradecraft helps avoid them.
In this episode of Signals & Stories, Kali Fencl sits down with Jennifer Kolde (thesilence), Principal Intelligence Analyst at The Vertex Project, and cyber threat intelligence expert, Kamil Bojarski, to explore how attribution has evolved over the last decade.