A Forensic Intelligence Approach for Profiling and Investigating Human-Driven Cyber Threats

In this day and age, cyberspace is rife with exposures generated by people - insider attacks, clever social engineering phishing schemes, and lurking advanced persistent threats, and each event not only tests company defences but also challenges the broader security framework of a nation. This chapter draws on an intersection of cyber forensics and human intelligence threat, with a forensic-first approach to provide a foundation to profile, investigate and pursue the people undertaking attacks. You'll observe how behavioural analytics, raw digital evidence, and advanced artificial intelligence work in concert to depict motivation, strategies, and actions intruders will employ, as well as their electronic footprints. Here are the sequential techniques to identify, pin blame, and mitigate these impacts and threats, which rely on forensic toolkits, network traffic examinations, and digital poison extraction, aka malware reverse engineering.