Cyber Threat Intelligence (Experts recommendations to enhance your security posture)
summary
Panelists claim CTI moves teams from reactive noise to focused action: collecting news feeds to brief leaders before questions arrive, building a triage board and prioritizing IOC handoffs, mapping vulnerabilities to MITRE mapping for exposure-driven fixes, and prototyping a data lake and hiring data scientists to link incidents across time. Examples include ignoring irrelevant crypto stealer alerts for a city, warning about npm/SBoM supply chain risks, and citing the March 2023 Pentagon deepfake market impact.
AI-written summary · about
chapters (14)
- 0:00CTI introduction and overview
- 1:47CTI value for security
- 4:54CTI in government security
- 8:03Strategic CTI perspective
- 12:20Unseen threat actors in CTI
- 16:17AI privacy risks in CTI
- 22:08Speed vs accuracy in CTI
- 25:17Human intelligence in CTI
- 28:57Integrating CTI with security ops
- 33:10Building CTI program
- 35:38Communicating CTI to leadership
- 36:40CTI and business outcomes
- 40:53Internal CTI pipelines
- 42:59Q&A
related talks
51mUsing Critical Threat Intelligence Strategically
32mTen Years of Cyber Threat Intelligence: Retrospectives
27mStandard Classification: Connecting the Dots: How Threat Intelligence Protect...
55mDefender Perspectives: Getting ROI from Cyber Threat Intelligence Vendors
26mEvaluating Threat Intelligence Through Velocity
21mAdvanced Cyber Threat Intelligence Chapter - How to Read the Mind of your Attackers
28mCyber Threat Intelligence Analysts and You
27mSolving CISO Headaches: How to Align CTI and Risk Management