The Building Blocks of Intelligence: Understanding how to apply relevant intel for smarter security automation
Indicators are the most well-understood and atomic building block of security- they’re also the most fluid. Intelligence needs to be quickly applied to indicators to evaluate, correlate, and predict higher level behaviors. When used correctly, IOCs (indicators of compromise) drive the behavior of defensive tools and dictate an organization’s current security posture.
During this webcast, Drew Gidwani, ThreatConnect’s Director of Analytics, will provide you with a practical understanding of how indicators are key to an intelligence-driven automation strategy. He’ll cover:
- Importance of assessing indicator reputation
- Handling the IOC scaling problem
- Understanding how to prioritize and score IOCs
Director of Analytics