Operationalizing Threat Intelligence

Chapter 10: Preparation and Dissemination

As we begin this chapter, we move into a new section of the book where we begin discussing how to review, analyze, and evaluate the empirical data that has been collected during our intelligence collection operations and prepare it for dissemination. While the identification of intelligence needs, the collection of data, hunting, pivoting, and the enrichment of that data might be considered the more exciting parts of the intelligence process, an organization will eventually need to produce some form of threat intelligence that can be consumed as well as develop processes to distribute this information. This is the production and dissemination phase of the intelligence life cycle that we introduced in ...