Using Intelligence to Heighten your Defense - CTI SUMMIT 2017

Using Intelligence to Heighten your Defense
When people think of threat intelligence, they think tracking groups outside of an organization. There is an often overlooked and equally (if not more) important function threat intelligence teams can serve. By focusing inwards first, teams can understand what the organization deems important, and prioritize detection efforts. Likewise, understanding what assets are at a higher risk of being compromised can help lead efforts in detection and remediation. Coming up with lists of High Value Assets and High Risk targets will allow intel teams to inform various stakeholder groups about risk they face. Heightened monitoring becomes possible as well, which can cause lower fidelity indicators to become useful. This presentation will cover defining High Value and High Risk Assets, while discussing methods and ideas for providing heightened monitoring for those assets. By knowing ourselves, we can better understand the adversary and their objectives.

Jeremy comes from a background in software engineering, but got his start in Cyber Security when he joined Ford's CIRT. Since then, he has helped build up, and work in, Ford's SOC. He moved to the CTI team performing a variety of duties.