Standard Classification: Connecting the Dots: How Threat Intelligence Protect...
summary
Claims a working CTI program that turned monitoring into action by building an onboarding service and alert pipeline, integrating Recovery Future feeds with an obsgeni to Slack pipeline, scraping criminal forums paste sites and domain registrations, and correlating technology stacks across 5k developers across 130 companies. It automates checks (a quick tool traced SolarWinds exposure), surfaces many false positives that needed tuning, and delivers triageable IoCs and TTP context so teams can remediate or take down squatting domains.
AI-written summary · about
chapters (4)
related talks
43mCyber Threat Intelligence (Experts recommendations to enhance your security posture)
32mTen Years of Cyber Threat Intelligence: Retrospectives
29mThrough the Eyes of the Adversary: How to Build a Threat Intel Program
25mOpenTide: From Raw Intelligence to Structured Threat-Informed Detections
55mCyber Security vs. Statistics
55mDefender Perspectives: Getting ROI from Cyber Threat Intelligence Vendors
38mAdversary Detection Pipelines: Finally Making Your Threat Intel Useful
25mDisparate Data, Distorted Decisions: Vendor Data Bias in CTI