Intelligence Divisions
The DSI operates multiple specialized divisions dedicated to specific threat vectors and intelligence gathering disciplines. These divisions work in tandem to produce the President's Daily Cyber Brief (PDCB).
Signals Intelligence (SIGINT)
Monitoring, intercepting, and deciphering communications and electronic signals from foreign adversaries. The SIGINT division employs advanced cryptanalysis and operates some of the most sophisticated supercomputing clusters in the federal government.
[PDF] SIGINT Annual Review (Redacted)Cyber Threat Intelligence (CTI)
Analyzing zero-day vulnerabilities, advanced persistent threats (APTs), and state-sponsored ransomware operations.
| Threat Actor Designation | Primary Origin | Current Threat Level |
|---|---|---|
| APT-29 (Cozy Bear) | Russian Federation | ELEVATED |
| APT-41 (Double Dragon) | People's Republic of China | CRITICAL |
| Lazarus Group | DPRK | HIGH |