312-39V2: Certified SOC Analyst v2

During a routine threat-intelligence briefing, a SOC analyst encounters a classified report describing a sophisticated cybercrime syndicate targeting executives at high-profile financial institutions. Unlike conventional malware-based attacks, these adversaries rarely leave digital traces and appear to anticipate security measures in advance.

While reviewing recent incidents, the analyst finds that several breaches started with seemingly harmless conversations: a foreign journalist seeking an interview with a CEO and a security consultant offering free risk assessments. Further investigation shows that the attackers socially engineered employees, exploited trust, and obtained critical security information long before initiating technical attacks.

Recognizing that the most valuable intelligence may not come from log files or malware analysis, the analyst focuses on intelligence involving deception detection and psychological profiling to reveal the attackers’ true intent and methods. Which type of intelligence is the analyst using in this situation?