Explore the critical aspects of intelligence analysis in cybersecurity through this GrrCON 2019 conference talk. Delve into the importance of relevance, timeliness, and qualitative analysis in threat intelligence. Learn how to determine relevant information, identify reliable signals, and interpret event data. Examine case studies on human intelligence collection, including #Oplcarus and IRGC connections to local groups. Gain insights into assessing risks from an actor standpoint and predicting future threat activity. Enhance your understanding of qualitative intelligence analysis and its role in cybersecurity decision-making.
Overview
Syllabus
Relevance, Timeliness, and the Role of Qualitative Intelligence Analysis
How to Determine Relevance and Timeliness
Identifying Reliable Signals and Focus
How Do I Determine What is Relevant?
Fidelis Total Detections Q1-Q2 2019
Event Data Continue to Show Attempts Using Older Methods
Corroborating Event Data
Dark Web and External Observations
Understanding Qualitative Analysis
Qualitative Intelligence Analysis in a Nutshell
Human Intelligence Collection
HUMINT Story 1: #Oplcarus
HUMINT Story #2: IRGC Connection to Local Group
Assessing Risks from an Actor Standpoint
Assessing Future Threat Activity
Questions
