USING TACTICAL AND STRATEGIC ANALYSIS TO TRACK THREAT ACTOR TARGETING

Summary from the TLDR InfoSec newsletter

This blog explores how intelligence analysts can distinguish objective victimology from subjective threat actor motivations when reporting on “targeted” sectors. Analysts can ensure consistent, data-driven threat assessments by leveraging standardized industry classifications (ISIC, NACE, and NAICS) and linking tactical evidence to strategic assertions in Synapse. Storm queries help validate that strategic conclusions about targeting are backed by concrete, observable evidence.