Actionable threat intelligence for security teams

Threat Reports

Threat Reports

A Beginner's Guide to MITRE ATT&CK: Mapping Threat Reports to Real TTPs

Threat Reports

A Beginner's Guide to MITRE ATT&CK: Mapping Threat Reports to Real TTPs

Learn what tactics, techniques and procedures really mean, and how to tag threat reports with MITRE ATT&CK technique...

Common Mistakes in Threat Intelligence Reports and How to Fix Them

Threat Reports

Common Mistakes in Threat Intelligence Reports and How to Fix Them

Vague attribution, decorative confidence scores and generic recommendations undermine threat reports. Here's how to...

Ransomware Threat Report Checklist: 12 Questions to Ask Before Trusting a Vendor's Claims

Threat Reports

Ransomware Threat Report Checklist: 12 Questions to Ask Before Trusting a Vendor's Claims

A practical checklist for validating ransomware vendor reports: probe the data sources, counting rules, timelines,...

How to Build a Threat Intelligence Feed Triage Workflow for a Two-Person Security Team

Threat Reports

How to Build a Threat Intelligence Feed Triage Workflow for a Two-Person Security Team

Two analysts cannot read everything. This workflow shows how to stage feeds, cut duplicates, score items against...