Ruarigh Thornton is Head of Research and Disruption at PGI. He previously led PGI’s Digital Investigations practice, where he built and scaled an OSINT function focused on detecting and attributing IO activity globally. Ruarigh specialises in finding the humans behind state threats, across counter espionage, IO, APT activity, and the commercial supply chain that builds capabilities for these actors. Ruarigh has led over 150 investigations which have been used for takedowns and network disruptions, domain seizures and state sanctions.