登录查看更多内容

How do you stay up-to-date with threat intelligence?

由人工智能和领英社区提供技术支持

Threat intelligence is the process of collecting, analyzing, and sharing information about current and emerging cyber threats. It helps you understand the motivations, tactics, and capabilities of your adversaries, and enables you to take proactive and preventive measures to protect your assets and data. But how do you stay up-to-date with threat intelligence in a fast-changing and complex cyber landscape? Here are some tips to help you.

此文章中的业界达人

由社区从 10 条内容中精选。了解更多

1 Subscribe to feeds

One of the easiest ways to stay on top of threat intelligence is to subscribe to feeds from reputable sources, such as security vendors, researchers, industry associations, and government agencies. These feeds can provide you with timely and relevant alerts, reports, indicators, and advisories on various threat actors, campaigns, vulnerabilities, and incidents. You can use tools like RSS readers, email newsletters, or social media platforms to access and organize these feeds according to your preferences and needs.

添加您的观点

Caique B.

Threat Intelligence Specialist | CEH | Digital Forensics and Incident Responder (DFIR) | CTI backend | Malware Analyst | Malicious Infrastructure Hunter | MISP | Ransomware Group Hunter | Teacher and Speaker.
举报内容
Extremamente necessário acompanhar notícias diárias, feeds de org?os, feeds de empresas, feeds até mesmo em redes sociais como o (X).

已翻译

赞
Santhosh Pillai (CISSP, CISM)

Information Security & Cloud Security Strategist | AI Governance & AI Security Consultant | Data Privacy & GRC Expert | CCSK | CAIC | GCSA | CEH | ISO 27001 LA | Award Winner | Speaker | Mentor
举报内容
Subscribe to either free or paid threat intelligence feeds and integrate the same with your XDR or SIEM platforms. Also, implement continuos monitoring as part of the security strategy.

已翻译

赞
Kajal Singh
举报内容
Certainly! In addition to the mentioned methods, staying current with threat intelligence also involves continuous monitoring of industry news, attending cybersecurity conferences, and collaborating with industry peers for real-time insights.

已翻译

赞

加载更多内容

2 Join communities

Another way to stay up-to-date with threat intelligence is to join communities of security professionals, experts, and enthusiasts who share their knowledge, insights, and experiences on various topics and issues related to cyber threats. These communities can be online forums, blogs, podcasts, webinars, or events where you can learn from others, ask questions, and contribute your own opinions and findings. You can also network with peers and mentors who can help you grow your skills and career in information security.

添加您的观点

Caique B.

Threat Intelligence Specialist | CEH | Digital Forensics and Incident Responder (DFIR) | CTI backend | Malware Analyst | Malicious Infrastructure Hunter | MISP | Ransomware Group Hunter | Teacher and Speaker.
举报内容
é importante se juntar a comunidades, seja por meio de grupos em diversas redes sociais ou até mesmo comunidades abertas. Muitos conteúdos e notícias s?o compartilhadas lá e podem auxiliar!

已翻译

赞

3 Use platforms

A third way to stay up-to-date with threat intelligence is to use platforms that aggregate, analyze, and visualize threat data from multiple sources and provide you with actionable and contextualized intelligence. These platforms can be commercial, open-source, or custom-built solutions that offer features like threat intelligence databases, dashboards, reports, alerts, APIs, and integrations with other security tools. You can use these platforms to search, filter, correlate, and enrich threat data and apply it to your specific use cases and scenarios.

添加您的观点

Jordan M. Schroeder

Innovative Cyber Security Leader & Strategist | National Cyber Resilience Advisory Board member
举报内容
Threat intelligence is a flood of data from multiple different sources and in a variety of formats. And a lot of data is unstructured. A Threat Intelligence platform is the best way to gather and make sense of flood of threat intel so that you can act on it quickly and consistently.

已翻译

赞

4 Conduct research

A fourth way to stay up-to-date with threat intelligence is to conduct your own research on the cyber threats that are relevant and important to you and your organization. You can use various methods and techniques to collect, process, and analyze threat data from different sources, such as open web, deep web, dark web, social media, malware samples, honeypots, or sensors. You can also use frameworks and models to structure and present your threat intelligence findings and recommendations.

添加您的观点

Dilan Rumesh

Associate Technical Specialist @ Wiley | BSc (Hons) Network Technology & Cyber Security | MSc Cyber Security and Forensics | CEH Master | CHFI | CNSS | CISE
举报内容
Staying up-to-date with the latest cybersecurity trends, threats, and vulnerabilities is crucial. The routine begins with checking cybersecurity news from sources like thehackernews.com, bleepingcomputer.com, and nakedsecurity.sophos.com, along with CISA email updates. As-well-as utilize various OSINT threat intelligence sources and cross-reference them with our organizational data. Additionally, platforms like virustotal.com, hybrid-analysis.com and attack.mitre.org prove invaluable when dealing with tactics, techniques, and procedures (TTPs). These intelligence sources empower me to stay current, detect threats early, understand evolving risks, and proactively address potential issues throughout the day.

已翻译

赞
Jordan M. Schroeder

Innovative Cyber Security Leader & Strategist | National Cyber Resilience Advisory Board member
举报内容
Not only is this staying aware of local threat intel, but it is also contributing to the Threat Intel community for everyone to benefit.

已翻译

赞

5 Update skills

A fifth way to stay up-to-date with threat intelligence is to update your skills and knowledge on the latest trends, developments, and best practices in information security. You can do this by taking courses, certifications, or training programs that cover topics like threat intelligence fundamentals, analysis, tools, standards, and processes. You can also read books, articles, white papers, or case studies that showcase real-world examples and lessons learned from threat intelligence projects and operations.

添加您的观点

6 Review practices

A sixth way to stay up-to-date with threat intelligence is to review your practices and processes for collecting, analyzing, and sharing threat intelligence within your organization. You can do this by evaluating your goals, objectives, requirements, resources, and metrics for threat intelligence and identifying the gaps, challenges, and opportunities for improvement. You can also seek feedback, input, and support from your stakeholders, partners, and customers to ensure that your threat intelligence is aligned with their needs and expectations.

添加您的观点

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Pranay Kokane

All Things CTI | LinkedIn Top Voice | Executive Member- CyberEdBoard | Ex.McKinsey & Company | Ex.Morgan Stanley | Ex.HDFC Bank | Threat Intelligence | Threat Hunt | AI | SIBM
(已编辑)
举报内容
- Threat intelligence is a time-sensitive game: The longer it takes to identify, classify, and respond to a threat, the more damage it can cause. - Therefore, staying up-to-date on threats is important: This means collecting and analyzing threat intelligence from a variety of sources, which is mentioned in the article. - However, it is also important to have a good understanding of the threat landscape: This means understanding the different types of threats that your organization faces, as well as the tactics and techniques that threat actors use. - Without a good understanding of the threat landscape, you may end up with overwhelming intelliegence: This can make it difficult to prioritize relevant threats and take effective action.

已翻译

赞
Brian Neuhaus

Cybersecurity Leader & CISO driving innovation at Neuhaus Ventures | Servant leader to making this planet a safer place
举报内容
A plethora of open source intelligence is available OSINT. Various media outlets do a great job covering new threats and sharing information specifically on them. Bleepingcomputer.com is a great resource. From there explore paid for threat feeds and also deep and dark web monitoring. I have a used HOLD security and Secureworks in the past. As you look to contract with third party incident response firms ask what they offer. Getting a retainer from the likes of Kroll, they usually offer ancillary services to share intelligence from the incidents they respond too.

已翻译

赞

Information Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you stay up-to-date with threat intelligence?

1

2

3

4

5

6

7

1 Subscribe to feeds

2 Join communities

3 Use platforms

4 Conduct research

5 Update skills

6 Review practices

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

更多Information Security相关文章

更多相关阅读内容

How do you stay up-to-date with threat intelligence?

1

2

3

4

5

6

7

1 Subscribe to feeds

2 Join communities

3 Use platforms

4 Conduct research

5 Update skills

6 Review practices

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

查看其他技能