The Blueprint for Enduring Actionable CTI

on YouTube ↗29m

" summary

Templates target four deliverables: threat actor report, intrusion analysis report, campaign and executive templates with prescriptive sections and sample language. An online authoring tool outputs JSON (searchable ATT&CK fields, automatic defend links, sensitivity tags, CSV upload for hashes) to reduce copy‑paste errors and enable basic metrics; a publishing tool converts JSON to Word/PDF. Code and examples are on GitHub and intended to raise production quality for new or under‑resourced CTI teams.

AI-written summary · about

" chapters (18)

1. 0:00Introduction
2. 1:13What are CTI blueprints
3. 2:38Supporting CTI production
4. 3:41Under-resourced CTI teams
5. 5:09Four report templates
6. 7:39Template structure guidance
7. 9:46Authoring tool reducing errors
8. 11:12Key authoring tool features
9. 14:03Linking reports to requirements
10. 14:44Benefits of CTI blueprints
11. 16:28Accessing the project
12. 17:10About CTI Defense Center
13. 18:12Q&A Challenges & improvements
14. 20:21Q&A Roadmap & financing
15. 21:24Q&A Partnerships
16. 22:52Q&A Succinct executive reports
17. 25:26Q&A Storing finished intelligence
18. 27:12Q&A Customizing report branding

" related talks

• 30mCTI Bake-Off: A Recipe for Measuring, Integrating, and Prioritizing a CTI ProgramKellyn Wagner Ramsdell · FIRST Cyber Threat Intelligence Symposium 2022
• 31mSkynet the CTI Intern: Building Effective Machine Augmented...Scott J Roberts · BSidesSF 2024
• 27mStandard Classification: Connecting the Dots: How Threat Intelligence Protect...C. Curelaru · OWASP 20th Anniversary 2021
• 28mCyber Threat Intelligence Analysts and YouJohn Doyle · FIRST Cyber Threat Intelligence Symposium 2022
• 30mBlueprint for Maturity: Crafting a Tailored Cyber Threat Intelligence Maturity ModelKiraga Slawek · 2024 FIRST Cyber Threat Intelligence Conference
• 13mAPTGen: An Approach towards Generating Practical Dataset Labelled with Targeted...Yusuke Takahashi, Shigeyoshi Shima, Rui Tanabe, Katsunari Yoshioka · 13th USENIX Workshop on Cyber Security Experimentation and Test (CSET '20)
• 32mTen Years of Cyber Threat Intelligence: RetrospectivesJames Chappell · FIRST Cyber Threat Intelligence Symposium 2022
• 50mOperational Templates for State-Level Attack and Collective Defense of CountriesGregory Conti, Robert Fanelli · Black Hat USA 2019