As correctly stated by @pmelson , intelligence analysis is not an inherently technical discipline, but by its very nature, cyber threat intelligence is. To be good at CTI requires both the competence to understand raw technical data in context as well as the analytical rigor to draw sound conclusions from it. The telltale sign of a classically trained intel analyst moving into CTI unprepared is an over-reliance on other reporting and analysis without challenging technical details or supporting prior reports with additional technical artifacts collected independently.
| GSC R&C | https://gsc-rc.net/ |