Read insights, thought leadership, and platform updates.

Explore all posts

Topics

Showing 58 posts about Threat Intelligence Operations

Top 3 User Group Takeaways from ThreatConnect Customers

ThreatConnect hosted four customer user groups in 2023, and we are grateful to our customers for providing invaluable insights. These insights will inform our product roadmap and our users’ shared strategies on how to get the most out of ThreatConnect. These events have served as a platform for sharing knowledge, exchanging ideas, and fostering collaborative […]

Posted Sep 27th, 2023

Threat Intelligence Operations

Intelligence-Powered Cybersecurity for State, Local, and Territorial Governments

State, local, and tribal (SLT) governments are responsible for numerous critical services like educating children, providing safe drinking water, delivering safety and emergency services, managing airports, and administering elections. Yet, the threat landscape for SLT governments is getting even more hostile. Ransomware gangs are increasingly indiscriminate regarding who they target and impact. Sophos’ “The State […]

Posted Sep 26th, 2023

Threat Intelligence Operations

The 7 Tenets of Threat Intelligence Operations – Tenet #5: Automate TI Ops Work

In the first blog of this series, I took a 30,000 foot view of the seven tenets of TI Ops defined in the Dawn of Threat Intelligence Operations paper. In this blog, I’m diving deeper into Tenet 5 – Automate TI Ops Work Automate the work of the TI Ops team Automation has permeated our […]

Posted Sep 21st, 2023

Threat Intelligence Operations

Create Intelligence Requirements in 5 Easy Steps

Understanding Intelligence Requirements As threat landscapes morph, intelligence requirements have emerged as a vital tool for cyber threat research and analysis. These are topics or research questions centered on an organization’s cyber threat priorities. They guide the Security or Threat Intelligence Team’s research and analysis efforts, providing valuable insights into threats, vulnerabilities, and cybercriminal tactics. […]

Posted Sep 20th, 2023

Threat Intelligence Operations

Top 5 Use Cases for ATT&CK Visualizer

The cybersecurity landscape is complex and fraught with many threats and vulnerabilities. Understanding and navigating this space requires access to up-to-date information on the activities of threat actors, which you can get through ThreatConnect ATT&CK Visualizer. What is ATT&CK Visualizer? ThreatConnect ATT&CK Visualizer is our new interactive platform capability that visualizes the MITRE ATT&CK matrix […]

Posted Sep 12th, 2023

Threat Intelligence Operations

The 7 Tenets of Threat Intelligence Operations – Tenet #4 – Go Beyond IoCs

In the first blog of this series, I took a 30,000 foot view of the seven tenets of TI Ops defined in the Dawn of Threat Intelligence Operations paper. In this blog, I’m diving deeper into Tenet #4 – Focus is not solely on indicators of compromise, but expands to cover the motivations, tactics, techniques, […]

Posted Aug 29th, 2023

Thought Leadership

That’s A Wrap From Black Hat USA 2023

Another Black Hat USA is in the books, and we’re already looking forward to 2024. The energy across the event was great, and as always, it was fun to catch up with colleagues, customers, and friends in person. I polled my colleagues on their takeaways from this year and what changed from BHUSA 2022. Quality […]

Posted Aug 24th, 2023

Threat Intelligence Operations

The Tenets of Threat Intel Operations – Tenet #3

In the first blog of this series, I took a 30,000-foot view of the seven tenets of TI Ops defined in the Dawn of Threat Intelligence Operations paper. In this blog, I’m diving deeper into Tenet #3 – Threat intel is aligned and focused on the most critical risks to the business through a living […]

Posted Jul 31st, 2023

Threat Intelligence Operations

ThreatConnect 7.2: Harnessing ATT&CK Visualizer for Evolved Threat Intel

Today, we’re launching version 7.2 of the ThreatConnect TI Ops Platform. It’s an exciting day because, with this release, we’re giving a massive upgrade to our customers with some fantastic new features and capabilities. Our latest features now include ATT&CK Visualizer, ThreatConnect’s native ATT&CK navigator, and Tag Normalization and Management. ATT&CK Visualizer will enable Threat […]

Posted Jul 26th, 2023

Threat Intelligence Operations

The 7 Critical Elements of a Robust PIR

Threat intelligence is crucial in understanding the threat landscape and making informed decisions. Priority Intelligence Requirements (PIRs) are central to effective threat intelligence planning and operations. PIRs enable organizations to prioritize and act upon the most relevant threats, giving focus to the management of threat intelligence. In this blog, we explore the concept of PIRs […]

Posted Jul 12th, 2023

Threat Intelligence Operations

The Future of Threat Intelligence for Large Enterprises

The evolving cyber threat landscape demands an innovative approach to cybersecurity, especially for large enterprises. Retail organizations and banks, in particular, face complex challenges in managing and mitigating cyber threats. The amount of data involved, coupled with the need to access multiple sources of intelligence, can be overwhelming. Our goal is to explore the changing […]

Posted Jul 6th, 2023

Threat Intelligence Operations

Why Threat Intel is Critical for Supply Chain Security

In today’s interconnected world, organizations rely heavily on a complex network of suppliers and vendors critical to their operations. They supply software used across an enterprise and provide services that may be part of essential business processes. While these partnerships offer numerous benefits, they can also introduce significant cyber risks that can impact the security […]

Posted Jun 28th, 2023