Explore Featured Resources

blue and orange rectangles stacked on top of each other

How ThreatConnect Leverages AI

Discover how ThreatConnect uses AI to enhance cybersecurity, reduce risks, and improve decision-making. Learn how to integrate AI into your security operations.

Solution Brief

Global Credit Union Reduces Alert Fatigue to Detect and Respond to Threats Faster

Combat alert fatigue with ThreatConnect. Discover how a credit union saved $1M annually and achieved 99% faster threat detection with advanced automation and threat intelligence.

Case Studies

Explore our resources about your favorite topics in the format you prefer

Topics

Types

ThreatConnect Platform

ThreatConnect Training: Playbook Components

Watch this training to learn what components are, when to use them, and examples of components. We also show you how to design, use, and save a Component. At the end, we build a Component from scratch.

Video

Threat Intelligence Operations

The Hunt is On: Fusing Global Threat Intelligence with a Threat Intelligence Platform

Hear experts from Symantec and ThreatConnect discuss how to select and effectively use threat intelligence to thwart attacks. In this webinar, you will learn: the sources and categories of effective threat intelligence; how you can use contemporary analysis tools to operationalize threat intelligence and make it actionable, and; popular use cases in which peer organizations […]

Video

Threat Intelligence Operations

Threat Intelligence Isnt One Size Fits All

Threat intelligence (TI) can help any organization better protect themselves. With TI, you can identify threats and add context to them. Once you understand what you are facing, you can take decisive action to better protect your organization. The need for high-quality, relevant threat intelligence is clear, yet many organizations still struggle with how to […]

Video

Threat Intelligence Operations

Threat Intelligence Processes are a Journey; Not a Destination

A decade ago manual analytics were all the rage. Unfortunately, yesterday’s processes can no longer scale to the threats of today. For example, many organizations are still convinced the answer to threat intelligence is a SIEM and vendor feeds – yet are complacent in allowing analysts to conduct highly repetitive and manual tasks versus enabling […]

Video

Threat Intelligence Operations

ThreatConnect RSA® NetWitness® Suite Integration

ThreatConnect® and RSA® have partnered to enable users to detect and act on ThreatConnect intelligence in the NetWitness Platform. With this integration, users can aggregate their internal logs and combine them with validated threat intelligence, so they can easily spot trends or patterns that are out of the ordinary and act on them efficiently as […]

Solution Brief

Threat Intelligence Operations

ThreatConnect IBM QRadar Integration

ThreatConnect® and IBM® have partnered to enable users to detect and act on ThreatConnect intelligence from within IBM QRadar®. This integration allows users to combine validated Threat Intelligence in ThreatConnect with their aggregated internal logs from QRadar. Users can easily spot trends or patterns that are out of the ordinary and act on them efficiently.

Solution Brief

ThreatConnect Platform

ThreatConnect Training, Workshops, and Services Catalog

Within this catalog, find a complete listing of ThreatConnect administered training, workshops, and service offerings. Constantly expanding, these offerings focus on kickstarting your experience with ThreatConnect to decrease your time to value, and ultimately help you master the ThreatConnect Platform.

Datasheet

Threat Intelligence Operations

Rating Threat Intelligence: Skulls Scale for Cyber Threats

In order for threat intelligence sharing and community collaboration to work, we all need to be speaking the same language. We, the analysts at the front lines, need a standard vocabulary and a standardized rating system so that we are all evaluating threats in the same manner.

Datasheet

ThreatConnect Platform

A ThreatConnect Success Story: Using Automation to Collaborate with Partners

Learn how ThreatConnect solved these problems for a customer: Improved focus on alerts within the organization Significant workload reduction through automated enrichment Consistent communication of threat and incident information internally and externally

Case Studies

Threat Intelligence Operations

Using Visualization to Make Threat Intelligence Actionable

Follow along with Dan Cole, Director of Product Management, and Drew Gidwani, Director of Analytics, as they discuss how to use visualization to make threat intelligence actionable. Tune into this webinar to learn the best practices for using dashboards and tracking security metrics, how to apply analytics in dashboards, and how to build a dashboard […]

Webinar

Threat Intelligence Operations

Playbook Fridays: QRadar Tag Search

Ground truth is one of the most important sources informing threat intelligence. A key source of this truth is what’s happening in the SIEM- QRadar in this case. Knowing this, we needed a way to the correlate data in QRadar with intelligence in the form of Indicators in ThreatConnect. This Playbook was created to provide […]

Video

Incident Response

The Diamond Model: An Analyst’s Best Friend

During this video, 2 of the 3 co-authors of the Diamond Model for Intrusion Analysis, Sergio Caltagirone from Dragos and Andy Pendergast from ThreatConnect, talk about how to properly utilize the Diamond Model for Intrusion Analysis to triage incidents and categorize threat activity. ThreatConnect is the only threat intelligence platform built on the Diamond Model […]

Video