Threat Intelligence in Practice

Chapter 3. Applied Threat Intelligence

Chapters 1 and 2 focused on the scope and creation of threat intelligence, but there is also a practical side of threat intelligence that needs to be explored. Many organizations that know they need threat intelligence also know that they are not going to be able to build a full threat intelligence team or build out a threat intelligence process.

In cases like this, the organization may rely almost exclusively on third-party threat intelligence providers to assist with a practical application of threat intelligence in their environment. This is a common scenario for mid-size organizations or those that simply don’t know where to start when it comes to threat intelligence. Using the right third-party providers can help an organization experience the benefits of a threat intelligence program without having to invest the, often, millions of dollars involved in building one.

In addition to understanding third-party threat intelligence providers, this chapter will also discuss the Diamond Model of threat intelligence and delve into the roles that strategic, tactical, and operational intelligence play in delivering effective intelligence across an organization.

Relevant Threat Intelligence at All Levels

There are a number of ways that an organization can access third-party threat intelligence. The most common way is through a subscription to a third-party threat intelligence provider. Such providers offer a wide range of services designed to help ...