Coursera Spring Sale
40% Off Coursera Plus Annual!
Grab it
Learn the complete lifecycle of conducting deep-cover human intelligence (HUMINT) operations within cybercriminal communities through this comprehensive conference talk from DEFCON 33. Discover how to identify and prioritize high-value underground forums, channels, and markets for intelligence gathering operations. Master the art of designing, building, and maintaining realistic personas capable of surviving long-term scrutiny by threat actors while navigating complex forum cultures, vetting mechanisms, and reputation systems to gain trust and access. Explore techniques for conducting direct engagements with cybercriminals to extract timely and actionable intelligence, while applying essential technical and behavioral operational security (OPSEC) fundamentals to minimize exposure and operational risk. Understand how to handle the psychological stressors, ethical dilemmas, and escalation scenarios inherent in deep-cover work, and learn to transform raw human-sourced data into structured, actionable cyber threat intelligence that supports detection, prevention, and response efforts. The presentation addresses the technical and psychological challenges of long-term undercover work, core OPSEC principles, and the legal and ethical considerations that shape responsible engagement with cybercriminal ecosystems, providing early warning of attacks, insight into threat actor motivations, and access to tools and exploits before they are actively deployed.
