Incident Response Techniques for Ransomware Attacks

Chapter 4: Cyber Threat Intelligence and Ransomware

Cyber threat intelligence is a very important part of incident response. After reading the previous chapter, you should be well informed about the current threat landscape and techniques leveraged by threat actors. You should know to perform your analysis fast and move to the next stages of the incident response process.

We'll discuss various types of cyber threat intelligence: strategic, operational, and tactical. Of course, practice is preferable, so we'll base our discussion on an open source report so that, together, we can distinguish various parts of it from various types of intelligence.

So, in this chapter we'll look at each type of cyber threat intelligence through the ransomware ...