I’ve already brushed up on the basics frameworks like MITRE ATT&CK, Diamond Model, OSINT sources, and the difference between strategic/operational/tactical/technical intel.

But I’d like to know what real-world interview questions to expect.

• Do they focus more on technical analysis (like pivoting from IOCs, malware family ID, enrichment workflows)?

• Or more on analytic writing, reporting, and communication with leadership?

• Any scenario-style or case-study questions that tend to come up (like “how would you track a phishing campaign”)?

I’d really appreciate examples from your own experience or tips for demonstrating good analytic thinking.

Thanks in advance trying to go in prepared and realistic, not just memorizing theory.