Chapter 10: Preparation and Dissemination
As we begin this chapter, we move into a new section of the book where we begin discussing how to review, analyze, and evaluate the empirical data that has been collected during our intelligence collection operations and prepare it for dissemination. While the identification of intelligence needs, the collection of data, hunting, pivoting, and the enrichment of that data might be considered the more exciting parts of the intelligence process, an organization will eventually need to produce some form of threat intelligence that can be consumed as well as develop processes to distribute this information. This is the production and dissemination phase of the intelligence life cycle that we introduced in Chapter 1, Why You Need a Threat Intelligence Program.
In this chapter, we will focus on how to interpret the collected data, evaluate it for intelligence, and identify what portions of it should be considered as timely, accurate, and relevant...
