
Insider Threat Matrix™
@ITMFramework
The Insider Threat Matrix™ - an open framework from @Forscie for mapping, investigating, and responding to insider threats.
On October 15, 2025, join @F0R5C13 and @KnownDivide as they walk through how the The Insider Threat Matrix™ helps insider risk teams replace uncertainty with clarity. Hosted by @Proofpoint. 📅 Wednesday, October 15, 2025 at 10 AM PT / 1 PM ET / 6 PM BST proofpoint.com/us/resources/w…
Sign-up now: proofpoint.com/us/resources/w…
The Insider Threat Matrix™ is an open framework for investigators and insider risk practitioners. On October 15, 2025, @Proofpoint hosts @KnownDivide and @F0R5C13 to show why it was created and how teams can adopt it. 📅 October 15, 10 AM PT / 1 PM ET / 6 PM BST…
Pirated media on endpoints isn’t just an annoyingly common AUP infringement. For insider threat investigators, patterns of behavior such as pirated media infringements can also help identify more serious drift before it escalates. knowledge.forscie.com/article/identi…
Our founders @F0R5C13 & @KnownDivide were recently interviewed by @proofpoint where they discussed the Insider Threat Matrix, and why it was built as a practitioner-first framework for real insider threat investigations. Read it here 👇 proofpoint.com/us/blog/inside…
I am increasingly concerned that major threat actors are finding it easier, cheaper and quicker to pop outwardly hardened orgs through recruiting insiders, than it is to launch a campaign externally.
Insider threats don’t begin with a breach. They begin with the erosion of boundaries. At Forscie, we call this Behavioral Drift, an early signal of insider threat escalation. knowledge.forscie.com/article/behavi…
From the creators of the Insider Threat Matrix. Forscie exists to safeguard trust where it is most fragile; arming investigators with clarity where confusion once reigned. forscie.com - Inside Matters.
forscie.com
Inside Matters - Forscie | Insider Threat Investigation & Defense
Defend trust from within. Purpose-built tools, training, and frameworks for insider threat investigation.
Big thanks to @Recon_InfoSec for having me on the Thursday Defensive Webcast! Enjoyed diving into the Insider Threat Matrix and insider threat investigations - excellent discussion. reconinfosec.com/thursday-defen…
Not all #InsiderThreats have malicious intent. "The subject has no threatening motive and is not reckless in their actions. The infringement results from an honest mistake made by the subject." Motive (AR1) - Human Error (MT016) Learn more: insiderthreatmatrix.org
insiderthreatmatrix.org
Insider Threat Matrix™ | Unified Framework For Investigators
ITM™ is an open framework for digital investigators and the cyber security community, to better address the challenges of computer-enabled insider threats.
Great to see so many people enjoying our co-founder, Joshua Beaman, speaking onstage at this year's Black Hat about potential use cases for the Insider Threat Matrix™. We'll be sharing the video soon, if you'd like to hear his insights. #InsiderRisk #InsiderThreat #BHUSA

The Insider Threat Matrix is now public. Our open framework covers Motive, Means, Preparation, Infringement, and Anti-Forensics (plus Preventions and Detections) - insiderthreatmatrix.org #insiderrisk #insiderthreat #dfir #cybersecurity

United States Trends
- 1. Bears 86.5K posts
- 2. Jake Moody 12.8K posts
- 3. Snell 22.6K posts
- 4. Falcons 49.8K posts
- 5. Bills 138K posts
- 6. Caleb 47.2K posts
- 7. Josh Allen 25.5K posts
- 8. #BearDown 2,227 posts
- 9. Jayden 21.9K posts
- 10. Swift 288K posts
- 11. #Dodgers 14.7K posts
- 12. phil 161K posts
- 13. Ben Johnson 4,051 posts
- 14. Turang 4,134 posts
- 15. Bijan 31.5K posts
- 16. Troy Aikman 5,945 posts
- 17. #RaiseHail 8,341 posts
- 18. Roki 5,955 posts
- 19. #NLCS 14.1K posts
- 20. Brewers 47.3K posts
Something went wrong.
Something went wrong.