Threat Intelligence

In cybersecurity, it’s important to stay on top of changes in the threat landscape and investigate how threat actors behave and what are the emerging risks. This means that we cannot rely only on our detections; we need to seek information from outside sources as well to enhance our knowledge and make better decisions. Therefore, one of the most important parts of the detection and analysis of cyber threats is the analysis of various sources of information and the synthesis of knowledge from it. Apart from internal detection mechanisms, there are many public and non-public sources of information describing current cyber threats that can be used to prepare defenses, improve cybersecurity analytics, and shed light on cybersecurity risks.

In this chapter, we will cover an introduction to threat intelligence and explain how artificial intelligence (AI) can be helpful in retrieving information from various threat intelligence data sources. Furthermore, we include...