How to Become One of Them: Deep Cover Ops

Sean Jones, Kaloyan Ivanov

Recon Village @ DEF CON 33 · Day 1 · Recon Village

In an era increasingly dominated by automated tools, artificial intelligence, and vast Open-Source Intelligence (OSINT) scraping, the human element in cyber threat intelligence often feels overlooked. This talk, "How to Become One of Them: Deep Cover Ops," presented by Sean Jones and Robert Rosio of Groupsense at Recon Village, challenges this perception by advocating for the indispensable role of **Human Intelligence (HUMINT)** in understanding and preempting cyber threats. The speakers meticulously outline the full lifecycle of deep cover operations within cyber criminal communities, arguing that while technology can gather data, it cannot build the trust necessary to penetrate closed networks, understand adversary intent, or access high-value, pre-public intelligence.

AI review

Competent tradecraft walkthrough from practitioners who've clearly done this work, but the content sits firmly in 'solid methodology explainer' territory rather than anything that advances the field. The intel lifecycle they describe — persona building, trust cultivation, verification loops — is real and useful, but it's not new, and the talk leans heavily on structure and framework over the kind of specific operational detail that would make it genuinely memorable.

Watch on YouTube