0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Operationalizing Threat Intelligence

You're reading from Operationalizing Threat Intelligence A guide to developing and operationalizing cyber threat intelligence programs

Product type Paperback

Published in Jun 2022

Publisher Packt

ISBN-13 9781801814683

Length 460 pages

Edition 1st Edition

Tools

Kali Linux

Concepts

Threat Hunting

Authors (2):

Joseph Opacki

Kyle Wilhoit

View More author details

Table of Contents (18) Chapters

Preface

1. Section 1: What Is Threat Intelligence?

2. Chapter 1: Why You Need a Threat Intelligence Program FREE CHAPTER

3. Chapter 2: Threat Actors, Campaigns, and Tooling

4. Chapter 3: Guidelines and Policies

5. Chapter 4: Threat Intelligence Frameworks, Standards, Models, and Platforms

6. Section 2: How to Collect Threat Intelligence

7. Chapter 5: Operational Security (OPSEC)

8. Chapter 6: Technical Threat Intelligence – Collection

9. Chapter 7: Technical Threat Analysis – Enrichment

10. Chapter 8: Technical Threat Analysis – Threat Hunting and Pivoting

11. Chapter 9: Technical Threat Analysis – Similarity Analysis

12. Section 3: What to Do with Threat Intelligence

13. Chapter 10: Preparation and Dissemination

14. Chapter 11: Fusion into Other Enterprise Operations

15. Chapter 12: Overview of Datasets and Their Practical Application

16. Chapter 13: Conclusion

17. Other Books You May Enjoy

Summary

In this chapter, we introduced you to the concept of similarity analysis to help you with your pivoting and hunting journey. Specifically, we talked about the motivations for doing similarity analysis, introduced you to similarity groups, and then tried to introduce you to some discrete mathematics concepts but tried to go light on the math! After that, we identified several grouping tools that could be used to build your graphs before introducing you to hashing and fingerprinting tools. These tools can run algorithmic hash functions against a file-based payload or a network infrastructure to allow you to identify similarities between files or the uniqueness of an infrastructure target.

In the next chapter, we're going to move on to another phase of the intelligence cycle and focus on how to prepare, evaluate, and disseminate threat intelligence information.

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (2)

Wilhoit

Wilhoit

Kyle Wilhoit is cybersecurity and cyber threat intelligence professional with wide experience ranging from security architecture to threat analysis, Kyle is specialized in threat intelligence collection and analysis, with a specific focus on nation-state actor groups. Kyle earned his graduate and undergraduate degrees from Lindenwood University, in St. Charles, Missouri. His work history includes being a threat researcher and leader throughout Silicon Valley, including companies like Domaintools, Trend Micro, Fireeye, and more. Kyle has been an active member on the Blackhat US board since 2016 and has spoken at over 40 conferences across the globe on original research he performed. Kyle currently resides in St. Louis, Missouri with his wife and kids.

See other products by Wilhoit

Opacki

Opacki

Joseph Opacki is a United States Marine Corps (USMC) veteran and career cyber security professional with a specialization in malware reverse engineering, computer intrusion investigation, security research, and threat intelligence. He received his undergraduate degree from George Mason University and his graduate degree from the Virginia Polytechnic Institute and State University. He has been active in academia working as an Adjunct Professor for over a decade in the Master of Digital Forensics program at George Mason University. Before his retirement from public service, Joseph was a malware reverse engineering Subject Matter Expert (SME) at the Federal Bureau of Investigation.

See other products by Opacki

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m