HOW TO COLLECT AND USE INTERNAL
THREAT INTELLIGENCE

 

For example, many organisations now use sandboxing to detect new malware attacks, however they might only use a single SHA from the sandbox for detection or blocking. However, a typical sandbox generates tens or even hundreds of threat indicators covering a wealth of information about the malware and how it operates. These can be used for detection of previous activity that was missed at the time, or used for future detection of related intrusion attempts.

 

In this webinar, we will explore some of the sources of internal threat data and how an organisation can leverage its own systems to provide the most relevant and actionable intelligence available.