Investigative Tradecraft
Practical methods and professional techniques used by insider threat investigators, from case structuring to subject handling and documentation standards.
Search
Ryan Bellows
Investigative Tradecraft
Behavioral Chaining: Operationalizing the Insider Threat Matrix™
Ryan Bellows is a Senior Information Security Analyst who leads insider risk operations for a Fortune 500 biotechnology company. A U.S. Army veteran with experience spanning the Department of Defense, incident response, detection engineering, and enterprise insider risk, Ryan began working with insider threat cases as part of a broader...
Joshua Beaman
Investigative Tradecraft
Insider Threat Chains
ITM Chains provide a scenario-driven way to visualize insider threat activity. Investigators can group specific Sections and Sub-sections into custom matrices to reflect the unique trajectory of a case. Pre-defined Chains, based on real-world incidents, help teams study past behaviors and apply those insights to current investigations.The goal is to...