Digital Forensics and Incident Response - Second Edition

Threat intelligence direction

There is a great deal of information, and data points, available to an organization in terms of threat intelligence. One of the major hurdles that organizations will have to jump over is in determining what their threat intelligence requirements are. With the depth of threat intelligence available, it is necessary to sift out the noise and focus only on threat intelligence that drives action within the organization.

In determining an organization's threat intelligence requirements, it is advisable to examine what actors pose a threat to the organization and how those threat actors would conduct an attack against the organization's network. To determine this, there are resources such as the MITRE ATT&CK methodology, ...