I will speak to the psychological analyst aspect of insider threat detection and how to use human behavior to tune alert events (MICE/RASCAL/STRIDE). The human factor of insider threat detection is the difference between DFIR and DFIT.
Small batch coffee: how to make a prime serving of espresso or americano with a 21st century french press.