Threat Intelligence and Beyond

Threat Intelligence: Hands-on Learning (NFSU Goa)
This presentation summarizes a threat intelligence workshop conducted at NFSU Goa. It focused on practical application through interactive exercises and case studies. Due to the live nature of these case studies, they are not included in the slides.

The presentation covers key concepts in threat intelligence, including:

Threat actors and motivations
Threat intelligence gathering and analysis
Utilizing threat intelligence for proactive defense
This session aimed to equip participants with the skills to identify and mitigate cyber threats.

For any questions or to learn more about the specific case studies, feel free to reach out.

Transcript

2. Rishika Desai Cybersecurity Researcher at BforeAI Writer and Blogger- Cyber Security
3. Threat intelligence, also known as cyber threat intelligence (CTI) or threat intel, is data collected and analyzed to understand cyber attacks and how to prevent and fight them. WHY DO YOU NEED THREAT INTELLIGENCE LIFECYCLE ?
5. ADVERSARY MALWARE VULNERABILITIES
6. Profiles, emails, repositories, dorks, PII, exposed databases, cloud environments, API endpoints, archives, exposed ports. Databreaches, forums, shoutboxes, communication channels, TOR, Telegram and other social anonymous platforms HUNTING VIA OSINT HUNTING VIA DARKINT
7. Image courtesy- internet
8. DO YOU HAVE A MOTIVE ? PROVING YOUR ASSUMPTIONS
9. PRIVAY AND SECURITY CONCERNS PRIORITISATION AND PROACTIVENESSS
13. USE OF AI AND MODERN TOOLS TO DO THREAT INTELLIGENCE
14. cve.circl.lu ai fOR CODE- SET UP MALWARE SANDBOXES OPENCTI INTERNET collection of vulnerabilities set up a collection inventory to collect and correlate new IOCs sharing across stakeholder osint is the key