Automating Cyber Threat Intelligence: A Practical Approach to Managing Emerging Vulnerabilities
summary
Datadog threat team describes an automated pipeline that scores CVEs by GitHub proof‑of‑concepts, NVD metadata, social‑media trends and customer footprint, flagging ~30,000 yearly CVEs down to an emerging vulnerability queue. The pipeline uses APIs, a simple score calculator, Terraform + Ansible for provisioning, CI/CD runners to deploy honeypots in 10 minutes, Jupyter hunts across customer telemetry, and Yeti to store IOCs — the system runs in production and accelerated detection and advisories.
AI-written summary · about
chapters (11)
- 0:00Automated cyber threat intelligence
- 1:46Team expertise at Datadog
- 3:56Emerging vulnerabilities challenges
- 6:43Manual to automated scoring
- 9:52Trendiness and PoC data
- 13:07Vulnerability reproduction
- 14:53Honeypot deployments with CI/CD
- 17:20Hunting in telemetry
- 20:27Threat intel with Yeti
- 22:13Key takeaways
- 24:20Closing remarks
related talks
51mAutomating CNA CVE Reporting and Monthly Bulletins
55mCyber Security vs. Statistics
43mBuilding a Secure DevOps Pipeline
33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology Estate
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
30mSecuring DevOps using OWASP DevSecOps Tools
41mKeeping Up With The Joneses (CVEs)
51mPractical Approach to Automate the Discovery & Eradication of Open-Source Software Vulnerabilities