I'm in the private sector, and have received a request for assistance with a technology from someone who works with/for the US military.

This is from someone I have had commercial contact with previously on an unrelated project. I have no personal knowledge of this person, and the request is not through "official channels" but more of a "I know you know about this, can you help me out, it will help us" informal inquiry.

Is there any way to tell if this person is white hat or black hat? I want to help the good guys, but not give tech to the bad guys.

I will not disclose any specific details, or potentially dox anyone. Just looking for general advice, if there is any, on how to proceed. I will proceed cautiously as I try to figure out the right course of action.