According to Prunckun (2019), if espionage were a game, the practitioners of counterintelligence “would be considered the game’s “goal keepers.” and without counterintelligence, the intelligence goal would be wide-open to such raiders” (p. 31). Therefore, counterintelligence detection is a necessary skill for each intel organization or agent. Pruncken (2019) lists the five criteria for detection:

Identifying an event of concern.
Identifying the person(s) who were involved in the event.
Identifying the organizational association of the person(s) of interest.
Identifying the current location of the person(s) of interest.
Gathering the facts that indicate that the person(s) committed the event.
Counterintelligence Deception

Deception is a common theme within any intel organization. This practice must be successfully implemented to gain advantages over an adversary. During the past several decades, here have been many lessons learned on counterintelligence deception techniques and practices due to rapidly advancing computer systems and the ability of hackers to infiltrate IT networks. Deception technology involves implementing “decoy systems and credentials scattered throughout the network that alert when attackers engage them” (Salazar, 2018, para 4), then they must breach another layer of security, traps and sensors that aid security personnel in halting and identifying the threats. The cyber attackers then modify their tactics, techniques and procedures (TTP) to bypass the added layers of security. Salazar (2018) notes that the decoys can remain operational following a security breach if the entity that deployed the decoy wishes to gain additional intel collection on the adversary. This is a constant cycle of ‘spy vs. spy’ that will undoubtedly continue as technological advances rapidly develop.

Counterintelligence Neutralization

Counterintelligence neutralization, or counter espionage, is a specific function within the counterintelligence field that is described as the “most subtle and sophisticated of all the counterintelligence functions” (Prunckun, 2019, p. 216), and involves implementing strategies that intentionally places agents/operatives in direct contact with their adversary’s intel personnel (Prunckun, 2014). Further, these operations are conducted to misinform the enemy, with the objective of disrupting the adversary’s operational plans.

Preferred Method

I believe that traps are a very effective tool within the counterintelligence field. There are countless methods of employing traps, including:

Setting up a false checkpoint to apprehend an adversary.
Leaving a vehicle unlocked to entice thieves.
Various undercover ‘sting’ operations.
Prunckun (2019) notes that assumed vulnerability is the foundation for a counterespionage trap, which implies that everyone has at least one vulnerability. When this vulnerability is uncovered, then it can be exploited.