Defender Perspectives: Getting ROI from Cyber Threat Intelligence Vendors

on YouTube ↗55m

" summary

Panel lays out concrete CTI ROI: run vendor proofs of value and bake-offs, deploy combined feeds for use cases (brand protection on Telegram monitoring, spear‑phish detection, deepfake voice fraud), and feed intel into SOC, vuln management and threat models so alerts become measurable risk reductions. Vendors share dark‑web collection, analyst‑led finished products, and takedown support (takedowns often fail), while boards prefer second‑order implications and ROSI metrics rather than raw IOCs.

AI-written summary · about

" chapters (22)

1. 0:00Introduction and panel setup
2. 1:46Defining cyber threat intelligence
3. 3:32Intelligence vendor differentiators
4. 6:24Why outsource intelligence capabilities
5. 8:32Top cyber threats today
6. 11:22Importance of intelligence sharing
7. 14:08Surprises in intelligence work
8. 16:59Decision advantage for leadership
9. 22:33Brand protection use case
10. 28:34Spear phishing defense strategies
11. 32:26Threat landscape assessments
12. 36:40Key takeaways and recommendations
13. 39:33Q&A session begins
14. 40:14Selecting threat intelligence platforms
15. 40:36Training analysts in critical thinking
16. 44:25Federal law enforcement and deepfakes
17. 46:49Operationalizing threat intelligence
18. 48:33Single vs multiple intelligence platforms
19. 49:36Industry-specific threat intelligence
20. 51:48Predictive intelligence challenges
21. 52:10Measuring ROI for executives
22. 53:35Convincing SMB boards to invest

" related talks

• 43mCyber Threat Intelligence (Experts recommendations to enhance your security posture)Prashant Prashant, Pedro Kertzman, Alyssa Hartford, Christopher Scutchings · BSides Edmonton 2025
• 27mStandard Classification: Connecting the Dots: How Threat Intelligence Protect...C. Curelaru · OWASP 20th Anniversary 2021
• 25mDisparate Data, Distorted Decisions: Vendor Data Bias in CTIEli Woodward · FIRST Conference 2026 (FIRSTCON26)
• 32mTen Years of Cyber Threat Intelligence: RetrospectivesJames Chappell · FIRST Cyber Threat Intelligence Symposium 2022
• 26mEvaluating Threat Intelligence Through VelocityJoe Slowik · FIRST Cyber Threat Intelligence Conference 2026
• 51mUsing Critical Threat Intelligence StrategicallyScott Hellman, Natalie Pittore, Erin Shepley · RSAC 2022
• 21mAdvanced Cyber Threat Intelligence Chapter - How to Read the Mind of your AttackersVladimir Kropotov, Erick Thek · 2024 FIRST Cyber Threat Intelligence Conference
• 29mThrough the Eyes of the Adversary: How to Build a Threat Intel ProgramScott Jarkoff, Jason Rivera · RSAC 2020 Asia Pacific & Japan