Главная
Study mode:
on
1
Intro
2
INTELLIGENCE IS A FEED
3
ATTRIBUTION IS A MUST
4
NOT ALL THREAT FEEDS CREATED EQUAL
5
NOT ALL INDICATORS CREATED EQUAL
6
APT 28 (Fancy Bear)
7
THE KILL CHAIN IS NOT DEAD
8
APT 28 Attack Phases
9
STEP 1 - KNOW YOURSELF
10
KNOW YOUR ENEMY
11
FIND RELEVANT THREATS
12
DISSEMINATE
13
REQUIREMENTS (EXAMPLES)
14
PROCESSING (EXAMPLES)
15
ANALYSIS (EXAMPLES)
16
DISSEMINATION (EXAMPLE)
17
THREAT INTEL PROGRAM MATURITY
18
KEY THREAT INTELLIGENCE FUNCTIONS
19
ASK YOURSELF
Description:
Explore the intricacies of effective threat intelligence in this BSides Detroit 2018 conference talk. Delve into the importance of attribution, the varying quality of threat feeds and indicators, and the enduring relevance of the kill chain. Examine the attack phases of APT 28 (Fancy Bear) and learn how to develop a robust threat intelligence program. Discover key steps in the process, including knowing yourself, identifying relevant threats, and disseminating information effectively. Gain insights into intelligence requirements, processing techniques, and analysis methods. Understand the maturity levels of threat intelligence programs and essential functions to consider. Equip yourself with the knowledge to ask critical questions and enhance your organization's cybersecurity posture through strategic threat intelligence implementation.

Know the Enemy - How to Make Threat Intelligence Work

Add to list