What is OPSEC?

Operational security is the discipline of protecting information about yourself and your work from adversaries. For investigators it means separating research identities from real ones, controlling the network and devices used, and avoiding actions that alert a target, such as uploading their sample to a public service.

Threat actors have OPSEC too, and their lapses, such as reused emails, personal accounts or careless screenshots, are some of the best leads analysts get.