All Categories
Search
James Weston
Insider Risk Theory
Behavioral Drift as a Predictive Signal for Insider Threat Escalation
In the practice of insider risk management, there is often a tendency to focus exclusively on acute acts of harm; data exfiltration, sabotage, and unauthorized disclosure. But these outcomes are seldom sudden. More often, they represent the final step in a longer behavioral trajectory that begins with relatively minor, individually...
Joshua Beaman
Detection & Forensics
Snipping Tool Artifacts of Visual Data Exfiltration
In insider threat cases involving data loss, a common assumption is that exfiltration occurs through conventional means: email, cloud uploads, removable media. However, some subjects bypass technical controls altogether by capturing data visually. The native Windows utility Snipping Tool provides one such method: enabling users to screenshot sensitive content directly...