Threat Intelligence is a Fallacy, but I May be Biased

As threat intelligence practitioners, we often discuss our biases, mental models, and the common fallacies that impact our analysis and reporting. This talk looks at how we've failed to effectively communicate some of the decisions that we've made consciously and unconsciously during the production and dissemination of threat intelligence, and how that impacts how our stakeholders think about the data. For example, threat profiles and analysis reports often talk about the targeted industry without actually discussing if the industry was specifically targeted, or if a member of that industry was breached as a target-of-opportunity. Without that clarity, organizations in that industry may misunderstand their threat landscape and prioritize defensive projects for lower-priority groups.
View upcoming Summits: www.sans.org/u/DuS
SANS Cyber Threat Intelligence Summit 2024
Threat Intelligence is a Fallacy, but I May be Biased
Andy Piazza, Global Head of Threat Intelligence, IBM X-Force