Leveraging Threat Intelligence

One area of incident response that has had a significant impact on an organization’s ability to respond to cyberattacks is the use of cyber threat intelligence or, simply, threat intelligence. The term Cyber Threat Intelligence covers a wide range of information, data points, and techniques that allow analysts to identify attack types in their network, adequately respond to them, and prepare for future attacks. To be able to properly leverage this capability, information security analysts should have a solid foundation in the various terminologies, methodologies, and tools that can be utilized in conjunction with threat intelligence. If analysts can utilize this data, they will be in a better position to take proactive security measures and, in the event of a security incident, be more efficient in their response.

In this chapter’s discussion of cyber threat intelligence, the following key topics will be discussed:

• Threat intelligence...