#threat actor

Threat investigation quick reference chart

When conducting a threat investigation, I have a quick reference chart that I keep stored between my ears. The problem is that location isn’t helpful to those I work with or assist. I put together a documented quick reference with my common go-to tools based on the SANS PICERL approach.

In case you are interested, here is what I normally think about when investigating an incident or actor. Hope…