Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Operationalizing Threat Intelligence

You're reading from Operationalizing Threat Intelligence A guide to developing and operationalizing cyber threat intelligence programs

Product type Paperback

Published in Jun 2022

Publisher Packt

ISBN-13 9781801814683

Length 460 pages

Edition 1st Edition

Tools

Kali Linux

Concepts

Threat Hunting

Authors (2):

Joseph Opacki

Kyle Wilhoit

View More author details

Table of Contents (18) Chapters

Preface

1. Section 1: What Is Threat Intelligence?

2. Chapter 1: Why You Need a Threat Intelligence Program FREE CHAPTER

3. Chapter 2: Threat Actors, Campaigns, and Tooling

4. Chapter 3: Guidelines and Policies

5. Chapter 4: Threat Intelligence Frameworks, Standards, Models, and Platforms

6. Section 2: How to Collect Threat Intelligence

7. Chapter 5: Operational Security (OPSEC)

8. Chapter 6: Technical Threat Intelligence – Collection

9. Chapter 7: Technical Threat Analysis – Enrichment

10. Chapter 8: Technical Threat Analysis – Threat Hunting and Pivoting

11. Chapter 9: Technical Threat Analysis – Similarity Analysis

12. Section 3: What to Do with Threat Intelligence

13. Chapter 10: Preparation and Dissemination

14. Chapter 11: Fusion into Other Enterprise Operations

15. Chapter 12: Overview of Datasets and Their Practical Application

16. Chapter 13: Conclusion

17. Other Books You May Enjoy

File-based IOCs

No matter what collection methodology is used to obtain unknown files, your organization can utilize several file analysis techniques to examine them. These techniques help derive file artifacts that can be used to determine the maliciousness of the file. Additionally, these file artifacts can be IOCs themselves or can help you generate file-based IOCs that can be used to identify the file or artifacts of the file's execution. These artifacts and IOCs can even be used to block activity on the endpoint or in the network; detection would mean that the file is successfully executed in your organization's environment.

File analysis techniques fall into three main categories:

Static tool analysis: This type of file analysis means that the researcher is focusing on what the file is. If it is harmful or malicious, any intelligence value that's provided by utilizing a software application or tool that derives artifacts and IOCs can be used to determine...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (2)

Wilhoit

Wilhoit

Kyle Wilhoit is cybersecurity and cyber threat intelligence professional with wide experience ranging from security architecture to threat analysis, Kyle is specialized in threat intelligence collection and analysis, with a specific focus on nation-state actor groups. Kyle earned his graduate and undergraduate degrees from Lindenwood University, in St. Charles, Missouri. His work history includes being a threat researcher and leader throughout Silicon Valley, including companies like Domaintools, Trend Micro, Fireeye, and more. Kyle has been an active member on the Blackhat US board since 2016 and has spoken at over 40 conferences across the globe on original research he performed. Kyle currently resides in St. Louis, Missouri with his wife and kids.

See other products by Wilhoit

Opacki

Opacki

Joseph Opacki is a United States Marine Corps (USMC) veteran and career cyber security professional with a specialization in malware reverse engineering, computer intrusion investigation, security research, and threat intelligence. He received his undergraduate degree from George Mason University and his graduate degree from the Virginia Polytechnic Institute and State University. He has been active in academia working as an Adjunct Professor for over a decade in the Master of Digital Forensics program at George Mason University. Before his retirement from public service, Joseph was a malware reverse engineering Subject Matter Expert (SME) at the Federal Bureau of Investigation.

See other products by Opacki

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m