Threat hunters and incident responders rely on intelligence to see, identify and respond to attacks. There are many forms of intelligence, which typically involve feed ingestion, data processing and automated reconnaissance. However, the one constant behind all attacks is that they are human-driven. As threat actors keep innovating to make their attacks more difficult to see and stop, another form of intelligence has become critical for cybersecurity success—Human Intelligence (HUMINT).
This paper focuses on HUMINT, defining it, discussing how it can be gathered and used, and the important role it plays in helping threat hunters defeat threat actors in the increasingly high-stakes world of cyber threats.