The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World

This open source book explores how intelligence and cyber-security analysts can uncover hidden links between threat actor infrastructure and ongoing investigations by pivoting on both classic and unconventional indicators β€” many of which are often overlooked. The material is grounded in empirical, field-tested strategies used in cyber-security, digital forensics, cyber threat intelligence, and intelligence analysis more broadly.

I released the first version of this book following the @firstdotorg CTI Conference 2025 in Berlin, where the initial idea for the project emerged.

πŸ”— PDF https://raw.githubusercontent.com/adulau/the-art-of-pivoting/refs/heads/main/output/the-art-of-pivoting.pdf

πŸ”— Source of the book in Markdown https://github.com/adulau/the-art-of-pivoting (if you want to contribute ;-)

#cti #threatintelligence #pivoting #pivot #intelligence #intelligencecommunity #cybersecurity #book #openbook #investigation #opensource

@misp
@ail_project

For more details about the background story behind this work:

https://www.foo.be/2025/12/the-art-of-pivoting

@firstdotorg @misp @ail_project

The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World

Personal webpage of Alexandre Dulaunoy - from information security to open source and art

Alexandre Dulaunoy - adulau - Home Page
@adulau @firstdotorg @misp @ail_project
Added to my reading list, at the top!
Thank you for that gift to the defender community.

@gzobra You're welcome. If you have any ideas or improvements, feel free.

@firstdotorg @misp @ail_project

I updated The Art of Pivoting based on reader feedback.

For example, the Analytical Strategies of Pivoting is now a visual overview than a difficult to read table.

Repository updated https://github.com/adulau/the-art-of-pivoting
PDF https://raw.githubusercontent.com/adulau/the-art-of-pivoting/refs/heads/main/output/the-art-of-pivoting.pdf

@firstdotorg @misp @ail_project

https://git.foo.be/adulau/the-art-of-pivoting/src/branch/main/output/the-art-of-pivoting.pdf

I just discovered that the PDF viewer on @forgejo is actually much better than the default one from Github.

the-art-of-pivoting/output/the-art-of-pivoting.pdf at main

the-art-of-pivoting - The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World

Forgejo: adulau git carryall - git.foo.be

@adulau

Looking forward to reading! Thank you.

@firstdotorg @misp @ail_project

@badsamurai I hope you will enjoy it. If you see anything to improve, let me know.

@firstdotorg @misp @ail_project

@adulau Excellent stuff! Sent to my team as well
@CryptoLek Thank you. Feedback is more than welcome. I will update it regularly.