This paper shows how Threat Intelligence improves Incident Response (IR), as it leads to both faster escalation and faster reaction.
Subsequently 4 components are introduced on how Threat Intelligence can be added to your Incident Response practice:
- Intelligence Requirements
- Threat Intelligence Feeds
- Threat Intelligence Platform
- Process and Roles
This paper concludes with 2 use cases from Fox-IT CERT:
- Faster than Forensics
- Understanding the modus operandi of an attacker
Read the paper by clicking the link below.
