John TerBush is a principal threat researcher on the Insikt Group research team at Recorded Future, with a focus on detection engineering, malware and infrastructure analysis, and tracking malicious operations. He has worked in security operations for decades, with a transition to information security after many years working as a private investigator.