Join us in the first episode of our podcast where we interview Garrett Carstens in beautiful Berlin.

Garrett shares his extensive experience in cyber threat intelligence, from his beginnings at the US Department of Defense to his current role as VP of Intel Operations at Intel 471.

We delve into the transition from government to private sector, the importance of critical thinking in cyber intelligence, the evolution of threat intelligence, and how to effectively measure success in this field. Garrett also discusses the role of artificial intelligence and machine learning in cyber intelligence and provides practical advice for those looking to make a similar career transition.

Resources and references mentioned:

• Intel471 - https://www.intel471.com/

• SANS blog - https://www.sans.org/blog/enhance-your-cyber-threat-intelligence-with-the-admiralty-system/

• FIRST CTI Conference Agenda - https://www.first.org/conference/firstcti25/program

• LinkedIn post on "what makes something intelligence?" - https://www.linkedin.com/posts/fmurre_in-your-opinion-when-does-something-go-from-activity-7181221399561203712-mV-m

• The Intelligence Architecture Mind Map on GitHub - https://github.com/Errum/IntelArchitectureMap

• SANS courses FOR578 CTI - https://www.sans.org/cyber-security-courses/cyber-threat-intelligence

• FOR589 Cybercrime Investigations - https://www.sans.org/cyber-security-courses/cybercrime-investigations

• Intel471 Handbook - https://www.intel471.com/resources/cyber-underground-handbook

• GitHub Repo - https://github.com/intel471/CU-GIR

This conversation is a compressed edit of an interview Freddy has conducted as part of his PhD research. The interview was recorded in April 21st, 2025 during the FIRST CTI Conference in Berlin