Conti Leaks and CARVER Analysis for Threat Intelligence Analysts

Explore a 22-minute conference talk from BSidesLV that delves into the application of the CARVER vulnerability assessment model to analyze the leaked Conti ransomware group's chat room discussions. Learn how a former intelligence officer with 20 years of experience utilized this methodology to rapidly assess potential risks to a large financial firm's enterprise model. Gain insights into maximizing the intelligence value from rare events like the Conti leaks, which occurred in 2022 due to a dissenting member's actions following the Russian invasion of Ukraine. Discover the steps taken to extract crucial information and understand how this approach can be applied in threat intelligence analysis for enhanced cybersecurity preparedness.