Spin Your CTI Process Round
summary
Argues that lacking case management and workflow is the real bottleneck, and shows a working Jira-based workflow (backlog → in progress → ready for four-eyes review → disseminate → closed) with mandatory custom fields and tags. Captures time spent, source usage, deliverable counts, and threat relevancy so monthly and annual metrics (assessments per actor, time per requirement, hunts supported, source ROI) are automated. Examples include SharePoint, Confluence, Azure DevOps, ServiceNow and a purpose-built RFI portal; outcome: better coordination, searchable finished intelligence, and capacity planning.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 2:51CTI progress and challenges
- 5:19Why workflow matters in CTI
- 7:04Defining CTI workflows
- 9:14Team CTI coordination
- 10:59Metadata in CTI workflows
- 13:09CTI metrics and workload
- 16:40Value of CTI systems
- 17:41Documentation and standard operating procedures
- 19:29Technology for CTI
- 21:58CTI journey recommendations
- 22:43CTI one-stop shop
- 23:47Service mentality in CTI
- 24:30Summary and call to action
related talks
26mIf CSIRTs are Knights, CTI Teams are Queens
27mStandard Classification: Connecting the Dots: How Threat Intelligence Protect...
43mCyber Threat Intelligence (Experts recommendations to enhance your security posture)
50mUsing IAC to Accelerate Threat Modeling
53mIntelligently Managing the Geopolitics and Security Interplay
26mEvaluating Threat Intelligence Through Velocity
32mOperational Efficiency in CTI: A Blueprint for SME's Using Open-Source AI and Cognitive Automation
28mCyber Threat Intelligence Analysts and You