Why intel matters

A threat intelligence analyst will ensure a steady stream of intelligence into and out of the threat hunting team. Directly out of the gate, intel analysts will be responsible for providing target-specific intelligence to aid in the planning and execution of the threat hunt. This could be anything from details on generic threats that the organization is concerned about to reports on targeted intrusions that have been carried out. This information can aid in understanding the specific TTPs an adversary would utilize. Additionally, it has the potential to shed light on potential intentions, motivations, and responses to hunt activity.

Throughout the execution of the hunt, the intel analyst will be responsible for fulfilling requests for information (RFIs) as well as enriching any data highlighted by the team. RFIs can range from clarification on a threat actor's capabilities to the history of protocols involved in past attacks. The scope of what the team lead...