0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Operationalizing Threat Intelligence

You're reading from Operationalizing Threat Intelligence A guide to developing and operationalizing cyber threat intelligence programs

Product type Paperback

Published in Jun 2022

Publisher Packt

ISBN-13 9781801814683

Length 460 pages

Edition 1st Edition

Tools

Kali Linux

Concepts

Threat Hunting

Authors (2):

Joseph Opacki

Kyle Wilhoit

View More author details

Table of Contents (18) Chapters

Preface

1. Section 1: What Is Threat Intelligence?

2. Chapter 1: Why You Need a Threat Intelligence Program FREE CHAPTER

3. Chapter 2: Threat Actors, Campaigns, and Tooling

4. Chapter 3: Guidelines and Policies

5. Chapter 4: Threat Intelligence Frameworks, Standards, Models, and Platforms

6. Section 2: How to Collect Threat Intelligence

7. Chapter 5: Operational Security (OPSEC)

8. Chapter 6: Technical Threat Intelligence – Collection

9. Chapter 7: Technical Threat Analysis – Enrichment

10. Chapter 8: Technical Threat Analysis – Threat Hunting and Pivoting

11. Chapter 9: Technical Threat Analysis – Similarity Analysis

12. Section 3: What to Do with Threat Intelligence

13. Chapter 10: Preparation and Dissemination

14. Chapter 11: Fusion into Other Enterprise Operations

15. Chapter 12: Overview of Datasets and Their Practical Application

16. Chapter 13: Conclusion

17. Other Books You May Enjoy

Hashing and fingerprinting tools

We wanted to wrap up the last section of this chapter by talking about hashing and fingerprinting tools that are widely used for similarity analysis. The core difference between using the grouping techniques we talked about earlier in this chapter and those in this section is that hashing and fingerprinting tools are typically executed on files or unique artifacts. These are then used to determine the similarity between the files or data that's being analyzed. The methods we have talked about so far have all pivoted off artifacts and indicators of malware and infrastructure. Let's discuss the first tool concept – import hashing.

Import hashing

Import hashing (imphashing) is a technique in which hash values are created and calculated based on the library or imported function names and their order within the executable. Simply put, imphashing is where you compute a hash of the Import Address Table (IAT). We first introduced you...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (2)

Wilhoit

Wilhoit

Kyle Wilhoit is cybersecurity and cyber threat intelligence professional with wide experience ranging from security architecture to threat analysis, Kyle is specialized in threat intelligence collection and analysis, with a specific focus on nation-state actor groups. Kyle earned his graduate and undergraduate degrees from Lindenwood University, in St. Charles, Missouri. His work history includes being a threat researcher and leader throughout Silicon Valley, including companies like Domaintools, Trend Micro, Fireeye, and more. Kyle has been an active member on the Blackhat US board since 2016 and has spoken at over 40 conferences across the globe on original research he performed. Kyle currently resides in St. Louis, Missouri with his wife and kids.

See other products by Wilhoit

Opacki

Opacki

Joseph Opacki is a United States Marine Corps (USMC) veteran and career cyber security professional with a specialization in malware reverse engineering, computer intrusion investigation, security research, and threat intelligence. He received his undergraduate degree from George Mason University and his graduate degree from the Virginia Polytechnic Institute and State University. He has been active in academia working as an Adjunct Professor for over a decade in the Master of Digital Forensics program at George Mason University. Before his retirement from public service, Joseph was a malware reverse engineering Subject Matter Expert (SME) at the Federal Bureau of Investigation.

See other products by Opacki

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m