How to overcome the Threat Intelligence Cycle Paralysis?
Demonstration on how to overcome threat intelligence paralysis by using a ransomware campaign and botnet threat, by providing context through their relationships with each other and additional threats.
As threat intelligence analysts, we experience everyday that there is no shortage of intelligence data for security teams, but there is lack of tradecraft and technology to make the data actionable and relevant.
We have seen too often, that intelligence teams cannot keep up with the high volume of threat intelligence data, resulting in a threat intelligence cycle paralysis and a lack of applicable reporting to key stakeholders.
In this webinar:
- We will show how to overcome this paralysis and how to deal with large volumes of intelligence from various feeds.
- We will use real intelligence data to demonstrate how a run-of-the-mill ransomware threat can spawn and turn out to be linked to botnets and various malware targeting the financial services sector.
For whom?
Cyber Threat Intelligence analysts working for or supporting financial institutions.
Presenters
Caitlin Huey & Jörg Abraham - Threat Intelligence Analysts at EclecticIQ Fusion Center
