Threat intelligence direction

There is a great deal of information and data points available to an organization in terms of threat intelligence. One of the major hurdles that organizations will have to jump is in determining what their threat intelligence requirements are. With the depth of threat intelligence available, it is necessary to sift out the noise and focus on only threat intelligence that drives action within the organization.

In determining an organization's threat intelligence requirements, it is advisable to examine what actors pose a threat to the organization and how those threat actors would conduct an attack against the organization's network. To determine this, there are resources such as the MITRE ATTACK methodology, the cyber-kill chain and diamond method that can aid an organization in determining what their threat landscape is like and better align their threat intelligence utilization to meet that threat.

Cyber kill chain

The cyber kill chain is a concept first authored...