Turbocharging IOC validation: Become a more efficient CTI analyst

No ratings

Presented at hack.lu 2023 by

Arwa Alomari

Cyber threat intelligence (CTI) analysts are inundated daily with new Indicators of Compromise (IOC)s to analyze. Due to the ephemeral nature of IOCs, analysts must analyze IOCs promptly to understand if an IOC is usable. IOC validation is one of the most time-consuming and frustrating aspects of analyzing an IOC. By optimizing IOC validation, an analyst can produce much more timely intelligence. In this session, you will learn first-hand how to turbocharge the validation of IOCs, thus saving you precious time and helping you prioritize your time to focus on high-value IOCs and creating both timely and actionable intelligence.