Operationalizing Threat Intelligence by Joseph Opacki Kyle Wilhoit

Author:Joseph Opacki, Kyle Wilhoit
Language: eng
Format: epub
Publisher: Packt Publishing Pvt Ltd
Published: 2022-05-10T00:00:00+00:00

The collection operation

Let's consider this idea. The threat intelligence life cycle is put into place to support an organization's ability to make strategic decisions about the security posture of the organization, the capability of a product, or as an actual product. This means that there is a constant and consistent feedback loop from the collection operation through the intelligence life cycle and into the hands of the decision-makers of an organization. Intelligence supports the decision-making process around security posture improvements, product improvement, and even just simply actionable and timely intelligence if your organization provides a threat intelligence product.

With this understanding in place, the collections team and the collection manager should establish an operational reporting cadence that cycles key takeaways from the collection operations upward for validation, evaluation, and strategic reporting during the collection operation and not just at the conclusion of the collection phase of the collection operations life cycle. The Collection and Analysis phases of the intelligence life cycle should have a feedback loop built in that enables this action.

While executing the operations plan, consider that there are several types of collection operations that can be used to gather intelligence and fulfill the intelligence requirements of an organization. The collection manager has the duty of assigning the collection type during the planning phase of the collection life cycle and assigning the collection task to personnel with the appropriate skillset to perform these different types of intelligence gathering. Let's talk about the different collection types.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.