Open Data (OSINT) and Threat Intelligence Sharing Platforms and Tools
Panelat FIRST & AfricaCERT Virtual Symposium for the African and Arab Regions 2021 · 2021-12-07..12-09·
summary
Panel shows concrete, usable plumbing: deploy MISP for sharing and takedowns, use the VARUS A4 schema to code incidents, ingest Shadowserver feeds via API and honeypot sensors, and stitch everything with enrichment and role-based access. Shadowserver runs 68 daily scans and a ~1.5 billion-sample malware repository, spotting ~200 million accessible services/day (Africa ~2.2M services, ~450k affected addresses/day) — feeds are free, integrable, and already drive takedowns, alerts, and automated detection.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:40Andras Iklody (CIRCL, LU)
- 20:13John Grim (Verizon, US)
- 38:19Piotr Kijewski (The Shadowserver Foundation, PL)
- 57:52Adli Wahid (APNIC, AU)
- 1:07:39Lawrence Muchilwa (Silensec, KE)
related talks
42mPanel: From Takedown to Touchpoint: An Inside Look at the Data-sharing Pipeline in the Victim ...
31mFiltering the Noise: Crafting an Actionable Threat Feed from Community-Shared Intelligence
34mOSINT for Proactive Defense
43mOpen Source Intelligence Based Intrusion Detection System
33mFree SOC? — how open source tools can come to our aid
27mThe Role of ThreatExchange
26mInternet Scanning - Current State and Lessons Learned
51mCyber threat intelligence sharing on AWS