Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Operationalizing Threat Intelligence

You're reading from Operationalizing Threat Intelligence A guide to developing and operationalizing cyber threat intelligence programs

Product type Paperback

Published in Jun 2022

Publisher Packt

ISBN-13 9781801814683

Length 460 pages

Edition 1st Edition

Tools

Kali Linux

Concepts

Threat Hunting

Authors (2):

Joseph Opacki

Kyle Wilhoit

View More author details

Table of Contents (18) Chapters

Preface

1. Section 1: What Is Threat Intelligence?

2. Chapter 1: Why You Need a Threat Intelligence Program FREE CHAPTER

3. Chapter 2: Threat Actors, Campaigns, and Tooling

4. Chapter 3: Guidelines and Policies

5. Chapter 4: Threat Intelligence Frameworks, Standards, Models, and Platforms

6. Section 2: How to Collect Threat Intelligence

7. Chapter 5: Operational Security (OPSEC)

8. Chapter 6: Technical Threat Intelligence – Collection

9. Chapter 7: Technical Threat Analysis – Enrichment

10. Chapter 8: Technical Threat Analysis – Threat Hunting and Pivoting

11. Chapter 9: Technical Threat Analysis – Similarity Analysis

12. Section 3: What to Do with Threat Intelligence

13. Chapter 10: Preparation and Dissemination

14. Chapter 11: Fusion into Other Enterprise Operations

15. Chapter 12: Overview of Datasets and Their Practical Application

16. Chapter 13: Conclusion

17. Other Books You May Enjoy

Storage platforms

Any organization starting a CTI program will eventually have to address storing and manipulating intelligence data during their daily operation of collecting and enriching. Most organizations will look to open source solutions in the infancy of their programs, though many move to custom threat intelligence platforms as the needs of the organization grow. There are two primary open source solutions that most organizations decide to employ – OpenCTI and MISP.

OpenCTI

OpenCTI (https://www.opencti.io/) is an open source tool that many new CTI shops wind up deploying once they realize that they need to manage their collection and have a place to enrich and contextualize this information. According to their documentation, "OpenCTI is an open source platform that allows organizations to manage their cyber threat intelligence knowledge and observables. It has been created to structure, store, organize, and visualize technical and non-technical information...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (2)

Wilhoit

Wilhoit

Kyle Wilhoit is cybersecurity and cyber threat intelligence professional with wide experience ranging from security architecture to threat analysis, Kyle is specialized in threat intelligence collection and analysis, with a specific focus on nation-state actor groups. Kyle earned his graduate and undergraduate degrees from Lindenwood University, in St. Charles, Missouri. His work history includes being a threat researcher and leader throughout Silicon Valley, including companies like Domaintools, Trend Micro, Fireeye, and more. Kyle has been an active member on the Blackhat US board since 2016 and has spoken at over 40 conferences across the globe on original research he performed. Kyle currently resides in St. Louis, Missouri with his wife and kids.

See other products by Wilhoit

Opacki

Opacki

Joseph Opacki is a United States Marine Corps (USMC) veteran and career cyber security professional with a specialization in malware reverse engineering, computer intrusion investigation, security research, and threat intelligence. He received his undergraduate degree from George Mason University and his graduate degree from the Virginia Polytechnic Institute and State University. He has been active in academia working as an Adjunct Professor for over a decade in the Master of Digital Forensics program at George Mason University. Before his retirement from public service, Joseph was a malware reverse engineering Subject Matter Expert (SME) at the Federal Bureau of Investigation.

See other products by Opacki

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m