Cyber Threat Intelligence

  1. Types of Threat Intelligence
    1. Strategic Intelligence
      1. Threat Landscape Overview
        1. Industry-Specific Threats
        2. Executive Audience Focus
          1. Executive Reporting Formats
            1. Decision Support Materials
          2. Tactical Intelligence
            1. Adversary TTPs Details
              1. Common Attack Vectors
                1. Defensive Recommendations
                2. Immediate Threat Focus
                  1. Real-Time Alerts
                    1. Playbooks and Runbooks
                    2. Security Management Audience
                      1. Operational Briefings
                        1. Security Architecture Guidance
                      2. Operational Intelligence
                        1. Specific Attack Information
                          1. Threat Actor Campaigns
                            1. Attack Timelines
                            2. Campaign and Intent Focus
                              1. Attribution Analysis
                                1. Campaign Tracking
                                2. Incident Response Audience
                                  1. Investigation Support
                                    1. Threat Hunting Guidance
                                  2. Technical Intelligence
                                    1. Indicators of Compromise
                                      1. IP Addresses
                                        1. File Hashes
                                          1. URLs
                                            1. Domain Names
                                            2. Malware and Infrastructure Focus
                                              1. Malware Analysis
                                                1. Signature Development
                                                2. SOC Analyst Audience
                                                  1. Detection System Integration
                                                    1. Automated Blocking

                                                Previous

                                                2. Threat Intelligence Lifecycle

                                                Go to top

                                                Next

                                                4. Data Sources for Threat Intelligence