Threat Intelligence 101: Separating Signal from Noise

Presented at THOTCON 0x8 (2017), May 5, 2017, 12:30 p.m. (25 minutes).

Threat Intel is the new magic buzzword for what separates one vendor's product from another. However, Threat Intel is as nebulous and mysterious as ever, because vendors hide what it is behind claims it is their Secret Sauce. Threat Intel is a valuable part of any Incident Reponder's arsenal, though the bad actors are making better use of it that we are. This talk is designed to discuss what the world believes Threat Intel means, what it should mean to you, where to get it, and how to find value in it.


Presenters:

  • M4n_in_Bl4ck
    Institutional defender and Incident Responder. Spends too much time veting vendor promises looking for nuggets of truth. Decent chef.

Similar Presentations: