Following up on our recent article regarding the best way to create relevant and actionable threat intelligence, I wanted to share this Venn diagram from my “Creating REAL Threat Intelligence” series of talks. Basically, you cannot buy relevant and actionable threat intelligence as it pertains to your organization.
There may be a slight overlap as the Venn diagram shows below but the vast majority of third party purchased “intel” either goes unused or results in scores of false-positives, since assigning real value to indicators is a difficult problem, that your analysts have to deal with in their precious time. Maybe the next big wave of cyber technology, machine learning, will save us.
Today’s post pic is from @JohnLaTwC. See ya!