ForscieForscie logo

Investigative Tradecraft

Practical methods and professional techniques used by insider threat investigators, from case structuring to subject handling and documentation standards.

Search

All Categories Stated CasesControl ArchitectureInsider Risk TheoryDetection & ForensicsPolicy & GovernanceInvestigative Tradecraft

Joshua Beaman

Investigative Tradecraft

Insider Threat Chains

ITM Chains provide a scenario-driven way to visualize insider threat activity. Investigators can group specific Sections and Sub-sections into custom matrices to reflect the unique trajectory of a case. Pre-defined Chains, based on real-world incidents, help teams study past behaviors and apply those insights to current investigations.The goal is to...