[Faircrylover]

how do you usually identify analysts from CTI companies?

In some posts, I can identify the way the questions are asked, but I understand that more experienced analysts are more careful.

Do you usually follow any how to on how to identify? Feel free to share your way

[lsassDoTexe]

What's your way?

[Faircrylover]

What's your way?

I ask key counterpoint questions to make the question asked more difficult.

they often ask questions that help in creating reports, for example.

[ShikataGanai]

This cannot be identified using technical skills but rather psychology, my way is to distract him with a "fake things" but those "fake things" must be something that could be believed to keep em away from the truth.

[302]

how do you usually identify analysts from CTI companies?

In some posts, I can identify the way the questions are asked, but I understand that more experienced analysts are more careful.

Do you usually follow any how to on how to identify? Feel free to share your way

I look at how they ask questions, experienced analysts tend to ask broader, more openended ones and reference things like TTP or IOC. They also avoid jumping to conclusions and focus more on context like motivations behind attacks. If they seem overly confident without backing it up, they might be less experienced. It iks mostly about the depth and caution in their language.