By Joseph Salazar, Technical Marketing Engineer
The term “counterintelligence (CI)” usually suggests espionage activities, intelligence agencies, and spy versus spy, but CI is not limited solely to military and government organizations. CI is any activity aimed at preventing an adversary from gathering information on one’s organization, and a modern cybersecurity strategy can leverage it.
Threat actors follow a playbook when infiltrating organizations to conduct their attacks. Once they break in and establish an internal foothold, they conduct internal reconnaissance to gather information, identify targets, and acquire credentials to move laterally and conduct operations. If defenders can stop attackers from conducting internal reconnaissance, they can cripple the attack, and this is where Cyber CI helps.
Join SentinelOne to understand how Deception Technologies provide Cyber CI capabilities across the entire enterprise: