Ruarigh Thornton is Head of Research and Disruption at PGI. He previously led PGI’s Digital Investigations practice, where he built and scaled an OSINT function focused on detecting and attributing IO activity globally. Ruarigh’s areas of expertise span complex threats including counter espionage, hostile state information operations, hacktivist/commercial vendors used in hostile state supply chains, and cyber threat intelligence focused on APT strategic intent and c2c enumeration. Ruarigh has led over 100 digital investigations which have been used for takedowns and network disruptions, domain seizures and direct sanctions.
