• From UK Police Intelligence to academia: Support versus specialist - Interview with Nadia Tuominen (S2E2)
    Feb 25 2026

    SummaryListen to Nadia Tuominen's path from crime science student to intelligence analyst in London’s Metropolitan Police, where she learned mostly on the job in a changing organization. She explains how austerity and lack of development pushed her to leave for sports integrity in tennis, then into the financial sector to work on economic crime. A later shift into academia and training lets her “close the circle” by teaching police officers and practitioners, creating qualifications she wishes had existed earlier. Across her journey, she emphasizes intelligence as a reasoning process, the importance of frameworks, elevating analysts from “support staff” to specialists, and helping people think better rather than just learn tools. Nadia emphasizes the need for analysts to be proactive, build relationships, and continuously develop their skills to adapt to the changing landscape of intelligence work.Key takeaways- Intelligence is a reasoning process for decision-making, not magic or perfect prediction. - Definitions of intelligence should fit each organization’s mission and context, rather than chasing one universal formula. - Frameworks like the UK National Intelligence Model, though imperfect, become clearly valuable once you work in less-structured private-sector environments. - Analysts should be treated as specialists, not generic “support staff,” to improve respect, pay, and decision quality. - Training should focus on how analysts think (cognition, self-awareness, bias) as much as on tools and structured techniques. - Biases are unavoidable and not inherently bad; the aim is to understand and manage them, not pretend they can be removed. - Many law enforcement analysts lack formal, portable qualifications, so building accessible, practice-based education helps careers and professionalizes the field.Resources and references mentionedNIM https://library.college.police.uk/docs/npia/NIM-Code-of-Practice.pdfICD 203 https://www.dni.gov/files/documents/ICD/ICD-203.pdfIntelligence Architecture Mind Map - https://github.com/Errum/IntelArchitectureMapPsychology of intelligence Analysis - https://www.cia.gov/resources/csi/static/Pyschology-of-Intelligence-Analysis.pdfAnalyst & Decision-Maker Conference - https://i2group.com/events/analyst-decision-maker-conference-2026Chapters02:59 Journey into Intelligence and Law Enforcement05:56 Training and Development in Intelligence Analysis09:12 Transitioning from Law Enforcement to Sports Integrity12:07 Understanding Intelligence Frameworks14:51 Exploring Financial Crime and Economic Crime17:49 The Role of Academia in Intelligence Analysis20:51 Training and Cognitive Function in Intelligence23:59 Defining Intelligence: Perspectives and Processes27:10 The Importance of Forward-Looking Intelligence29:57 Analysts as Specialists, Not Support Staff37:13 The Role of Analysts in Decision Making38:25 Understanding AI and Its Implications40:30 Critical Thinking in AI Usage42:35 Explainability and Trust in AI44:22 Evaluating AI vs Human Intelligence46:24 The Importance of Input in AI48:28Training and Experience in Intelligence Analysis55:33 Measuring the Value of Intelligence01:01:05 The Dialogue of Intelligence01:04:17 The Future of AI in Intelligence01:12:10 Preparing for a Career in Intelligence

    Show More Show Less
    1 hr and 18 mins
  • Lessons from a Former NCIS Analyst: Navigating Cyber Threats and board rooms - Interview with Teresa Walsh (S2E1)
    Feb 25 2026

    Summary

    Here, Teresa Walsh, a former NCIS analyst and current Chief Intelligence Officer (CINO), shares how intelligence tradecraft, critical thinking, and stakeholder-focused analysis must underpin cyber threat intelligence in an AI-saturated world, especially in heavily regulated sectors like finance.

    She discusses the importance of understanding the audience in intelligence work, the challenges of transitioning from government to private sector, and the evolving role of AI in the field.

    Teresa emphasizes the need for critical thinking, continuous training, and the significance of stakeholder engagement in delivering valuable intelligence. The conversation also touches on the future of intelligence, the impact of AI, and the importance of measuring success and value in intelligence work.


    Key takeaways

    • Intelligence is a profession, not a personality trait
    • Raw data is not intelligence
    • Audience and purpose drive value
    • Private-sector CTI lacks role and training standards
    • Finance is mature because it’s regulated, not smarter
    • Effective CTI blends technical and strategic skills
    • AI and LLMs are tools, not replacements
    • Beware “AI solves everything” thinking
    • Metrics must go beyond counts
    • Curiosity, humility, and feedback fuel growth


    Resources and references mentioned

    • Structured Analytic Techniques (SAT) book - https://www.amazon.com/Structured-Analytic-Techniques-Intelligence-Analysis/dp/150636893X
    • Feedly - https://feedly.com/
    • IAP Training - https://inteltradecraft.com/sat-certifications
    • SANS Talk: The Way to a Stakeholder’s Heart is by Providing Value: Measuring Success of Your CTI Program - https://www.youtube.com/watch?v=5agsRg6-L4o
    • Metrics by Gert-Jan - https://github.com/gertjanbruggink/metrics
    • Psychology of Intelligence book - https://www.cia.gov/resources/csi/static/Pyschology-of-Intelligence-Analysis.pdf
    Show More Show Less
    1 hr and 33 mins
  • From Collections Manager in the FBI to Teaching Analytic Tradecraft: Analytic Skills versus Cyber Skills - Interview with Elizabeth Dos Santos (S1E7)
    Dec 21 2025

    Summary

    In this podcast episode, Elizabeth Dos Santos shares her journey from a 25-year career in the FBI, focusing on intelligence analysis and counter-terrorism, to the private sector, teaching intelligence.

    She discusses the challenges she faced, the importance of communication skills, and her transition to the private sector. Elizabeth emphasizes the role of AI in intelligence, the need for critical thinking, and the significance of structured analytic techniques in training.

    She also provides valuable advice for aspiring intelligence analysts, highlighting the importance of writing and presentation skills.



    Takeaways

    • Elizabeth Dos Santos has a rich background in intelligence, having worked for the FBI for nearly 25 years.
    • Her journey into intelligence began through a suggestion from her father.
    • She emphasizes the importance of communication skills in intelligence analysis.
    • Elizabeth shares her transition from government to private sector work and the cultural differences.
    • She highlights the importance of structured analytic techniques in training and analysis is emphasized.
    • Elizabeth advises aspiring analysts to focus on writing and presentation skills.
    • The conversation touches on the need for transparency in AI and the importance of critical thinking.
    • AI presents both opportunities and challenges in the field of intelligence.



    Resources and references mentioned

    • The Psychology of Intelligence Book - https://www.cia.gov/resources/csi/books-monographs/psychology-of-intelligence-analysis-2/
    • The Six Thinking Hats Book - https://www.amazon.com/Six-Thinking-Hats-Edward-Bono/dp/0241257530
    • Pherson Associates - https://pherson.org/
    • ICD 203 - https://www.dni.gov/files/documents/ICD/ICD-203.pdf
    • SANS FOR578 CTI - https://www.sans.org/cyber-security-courses/cyber-threat-intelligence
    • Is all Intelligence Forward Looking blog post - https://inteltradecraft.com/is-all-intelligence-forward-looking
    • The Thinking, Fast & Slow Book - https://www.amazon.com/Thinking-Fast-Slow-Daniel-Kahneman/dp/0374275637
    • Training with Intelligence Tradecraft - https://inteltradecraft.com/sat-certifications
    • IAFIE - https://www.iafie.org/
    • The Structured Analytic Techniques (SAT) Book - https://www.amazon.com/Structured-Analytic-Techniques-Intelligence-Analysis/dp/150636893X
    • The SAT Handbook book - https://www.amazon.com/Handbook-Analytic-Tools-Techniques-5th/dp/0979888093/
    • Admiralty Scale SANS Blog - https://www.sans.org/blog/enhance-your-cyber-threat-intelligence-with-the-admiralty-system/
    • SANS FOR589 Cybercrime course - https://www.sans.org/cyber-security-courses/cybercrime-intelligence/



    Chapters

    00:00 Introduction to Elizabeth Dos Santos

    01:51 Journey into Intelligence

    08:44 Career Development in the FBI

    12:40 Challenges and Growth in Intelligence

    19:39 Transitioning to the Private Sector

    27:52 The Role of AI in Intelligence

    53:23 Advice for Aspiring Intelligence Analysts

    01:07:29 The Importance of Communication in Intelligence

    01:14:19 Structured Analytic Techniques and IAP

    01:18:19 Conclusion and Reflections on Intelligence



    This conversation is a compressed edit of an interview Freddy has conducted as part of his PhD research. The interview happened on May 13th, 2025 in Copenhagen, Denmark.

    Show More Show Less
    1 hr and 32 mins
  • From Manual Googling to Sophisticated Insight: Government Lessons for the Private Sector - Interview with Terry Pattar (S1E6)
    Dec 3 2025

    Summary

    In this conversation, Terry shares his journey from government intelligence to the private sector, discussing the evolution of training and methodologies in intelligence analysis. He emphasizes the importance of structured analytical techniques and the challenges faced in adapting these methods in the private sector. The discussion also touches on the impact of geopolitics on cyber threats and the role of AI in intelligence work, highlighting the need for critical thinking and planning in the analysis process. Terry reflects on the differences between open source intelligence and open source information, and the importance of understanding biases in AI tools.


    Takeaways

    • Terry is a senior director for customer success at Atreides.
    • He has a mixed career in both government and private sectors.
    • Training in intelligence has evolved significantly over the years.
    • Open source intelligence became more prominent after 2008.
    • Structured analytical techniques are crucial for effective analysis.
    • Planning is essential before diving into information collection.
    • The maturity of intelligence practices varies between sectors.
    • Geopolitical events significantly influence cyber threats.
    • AI tools can assist but come with their own challenges.
    • Understanding biases in AI is critical for effective intelligence.


    Resources and references mentioned

    • SATs training - https://inteltradecraft.com/sat-certifications
    • SANS FOR578 CTI - https://www.sans.org/cyber-security-courses/cyber-threat-intelligence
    • Structured Analytic Techniques (SAT) training - https://inteltradecraft.com/sat-certifications
    • Arno exemplifies "spending time to save time" - https://opensourceintelligence.biz/vague-osint-questions/
    • ICD 203 - https://www.dni.gov/files/documents/ICD/ICD-203.pdf
    • Intelligence agencies are starting to crowdsource information and recruits! For example, the MI6 platform, Silent Courier: https://www.gov.uk/government/news/new-dark-web-portal-launched-to-recruit-spies-to-support-uk-security


    Chapters

    00:00 Introduction to Terry's Journey

    02:54 Training and Development in Intelligence

    05:52 Transitioning from Government to Private Sector

    08:58 Challenges in Intelligence Analysis

    11:50 The Role of Planning in Intelligence Work

    14:51 The Maturity of Intelligence in the Private Sector

    17:53 The Impact of Geopolitics on Cyber Intelligence

    20:56 The Future of AI in Intelligence

    23:43 Open Source Intelligence vs. Open Source Information

    26:47 Advice and Reflections on Intelligence Work


    This conversation is a compressed edit of an interview Freddy has conducted as part of his PhD research. The interview happened on May 3rd, 2025 in London, England.

    Show More Show Less
    1 hr and 3 mins
  • CTI Analysis, Co-Authoring a SANS course, and Building a vibrant CTI sharing community - Interview with Will Thomas (S1E5)
    Nov 26 2025

    In this conversation, Freddy and Will delve into the world of Cyber Threat Intelligence (CTI) and sharing communities, exploring of Will T, the journey of a cybersecurity professional, the importance of training and community, the challenges faced in threat reporting, and the impact of AI on the field.

    They discuss the evolution of CTI, the necessity for critical thinking, and the ethical considerations surrounding the use of AI in intelligence work. The conversation emphasizes the need for collaboration and knowledge sharing within the cybersecurity community to enhance overall effectiveness against cyber threats.


    Takeaways

    • The importance of foundational knowledge in cybersecurity.
    • Real-world experience is crucial for developing analytical skills.
    • Training can significantly enhance an analyst's capabilities.
    • Community support is vital for sharing knowledge and resources.
    • AI can assist in summarizing and analyzing data but has limitations.
    • Ethical considerations are paramount when using AI in intelligence.
    • Critical thinking is essential in evaluating threat reports.
    • Transparency in threat reporting builds trust with stakeholders.
    • Continuous learning and adaptation are necessary in cybersecurity.
    • Collaboration within the community can lead to better threat mitigation.


    Resources & References Mentioned

    • Rob M. Lee - https://www.dragos.com/team/robert-m-lee/
    • SANS FOR578: https://www.sans.org/cyber-security-courses/cyber-threat-intelligence/
    • SANS FOR589: https://www.sans.org/cyber-security-courses/cybercrime-investigations/
    • Chainalysis Blockchain Intelligence: https://www.chainalysis.com/blockchain-intelligence/
    • SANS blog post on Admiralty Scale https://www.sans.org/blog/enhance-your-cyber-threat-intelligence-with-the-admiralty-system/
    • Oracle incident - https://www.csoonline.com/article/3953644/oracle-quietly-admits-data-breach-days-after-lawsuit-accused-it-of-cover-up.html
    • Flavio Queiroz's LinkedIn post - https://www.linkedin.com/posts/flavioqueiroz_threathunting-threatdetection-threatanalysis-activity-7310254153732141056-b-Ba/
    • Council of Experts: https://blog.bushidotoken.net/2024/04/strengthening-proactive-cti-through.html
    • Will's Projects: https://github.com/BushidoUK#-my-projects
    • Ransomware Tool Matrix: https://github.com/BushidoUK/Ransomware-Tool-Matrix
    • Curated Intelligence: https://www.curatedintel.org/
    • MITRE ATT&CK: https://attack.mitre.org/
    • Diamond Model of Intrusion Analysis: https://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf?adlt=strict
    • Mapping TTPs: https://github.com/BushidoUK/MITRE-Mappings
    • Curated Intel website - https://www.curatedintel.org/
    • Microsoft Security Copilot: https://www.microsoft.com/en-us/security/business/ai-machine-learning/microsoft-security-copilot


    Chapters

    00:00 Introduction to Cyber Threat Intelligence

    02:48 Career Journey in Cybersecurity

    06:08 Understanding Cyber Threat Intelligence

    09:06 The Role of Training in Cyber Intelligence

    11:57 Teaching and Sharing Knowledge in Cybersecurity

    15:08 The Importance of Community in Cyber Intelligence

    17:54 Challenges in Cyber Threat Reporting

    20:56 The Impact of AI on Cyber Threat Intelligence

    24:08 Future of AI in Cybersecurity

    26:47 Ethics and Challenges of AI in Intelligence

    29:57 Conclusion and Final Thoughts


    This conversation is a compressed edit of an interview Freddy has conducted as part of his PhD research. The interview happened on May 2nd, 2025 in Bournemouth, England.

    Show More Show Less
    55 mins
  • From the CIA to inspiring global intelligence communities - Interview with Kathy Pherson (S1E4)
    Nov 26 2025

    Step inside the real world of intelligence with Kathy Pherson, a pioneering CIA analyst whose career arc spans from a curious Kansas City upbringing to the highest levels of global intelligence. In this episode, Kathy reveals how she navigated the challenges of intelligence writing, honed her craft in security and Latin American analysis, and ultimately transformed the field with innovative structured analytic techniques.


    Listeners will hear her candid reflections on balancing data and practical countermeasures, adapting to the evolving demands of intelligence, and the crucial role of critical thinking in a world increasingly shaped by AI. Learn how Kathy’s work at the White House, her leadership of Pherson Associates, and her presidency at the International Association for Intelligence Education are shaping future intelligence professionals. With stories of teamwork, adaptation, and even a personal mission to fight rare diseases, this conversation promises to intrigue, inspire, and challenge your ideas about intelligence analysis, education, and the intersection with advanced technologies - Intelligence Tradecraft Podcast S1E4

    Show More Show Less
    1 hr and 46 mins
  • Storytelling, Stakeholders, and Communicating CTI to the Board - Interview with Gert-Jan Bruggink (S1E2)
    Sep 28 2025
    In this conversation, Freddy and Gert-Jan delve into the complexities of cybersecurity and cyber threat intelligence (CTI), exploring the importance of decision-making informed by intelligence, the challenges of training and development in the field, and the significance of metrics in demonstrating value. They discuss the evolving role of AI in cybersecurity, the necessity of critical thinking, and the importance of mentorship and community support for aspiring professionals.TakeawaysThe journey into cybersecurity often starts with hands-on experience rather than formal education.Understanding the implicit decision-making processes in CTI is crucial for effective intelligence work.Training and continuous learning are essential in cybersecurity.Metrics should focus on impact rather than just activities to demonstrate value to stakeholders.AI is transforming the landscape of intelligence, but critical thinking remains vital.Source assessment and information evaluation are key components of effective intelligence generation.The importance of storytelling in conveying intelligence to different stakeholders cannot be overstated.Building a community and supporting others in their journey is a fundamental aspect of professional growth.Recognizing influential figures in one's career can provide valuable insights and direction.The future of CTI will require adaptability and a focus on explicit decision-making processes.Resources and references mentionedThe APT 1 report - https://services.google.com/fh/files/misc/mandiant-apt1-report.pdfVenation - https://venation.digital/Gert-Jan speaking at the FIRST conference - https://youtu.be/2pSjbSx8J1Q?t=5202CTI-CMM web site - https://cti-cmm.org/SANS FOR578 - https://www.sans.org/cyber-security-courses/cyber-threat-intelligenceIntelligence ans Structured Analytic Techniques (SATs) training - https://inteltradecraft.com/sat-certificationsArno's LI profile - https://www.linkedin.com/in/reuser/Admiralty Scale SANS Blog post - https://www.sans.org/blog/enhance-your-cyber-threat-intelligence-with-the-admiralty-system/MISP Admiralty Scale - https://www.misp-project.org/taxonomies.html#_admiralty_scaleSANS talk on metrics - https://www.youtube.com/watch?v=-d38C3992aQGert Jan's Metric GitHub - https://github.com/gertjanbruggink/metricsMy SANS talk on measuring success of CTI programs - https://www.youtube.com/watch?v=5agsRg6-L4oChapters00:00 Introduction to Gert-Jan and the CTI Conference02:50 Gert-Jan's Journey in Cybersecurity05:51 The Role of Intelligence in Decision Making08:50 Training and Development in Cyber Threat Intelligence12:06 Consultancy and the Importance of Storytelling14:46 Generating and Consuming Intelligence17:37 The Distinction Between OSINT and OSINF20:49 Prioritization and Decision Making in Intelligence23:54 The Art of Failure and Learning26:55 Navigating the Intelligence Cycle29:53 Responding to Incidents and Public Perception35:38 Critical Thinking in Source Assessment39:48 Understanding Source Reliability43:04 The Role of AI in Intelligence51:31 Metrics and Measuring Impact01:06:02 Advice for Aspiring CTI Professionals01:11:49 Reflecting on Influential FiguresThis conversation is a compressed edit of an interview Freddy has conducted as part of his PhD research. The interview was recorded in April 21st, 2025 during the FIRST CTI Conference in Berlin.
    Show More Show Less
    1 hr and 14 mins