CYBER THREAT INTELLIGENCE

#1 Planning: We set out the goals, objectives and methodology for collecting threat intelligence based on the requirements of key stakeholders. It involves identifying who the attackers are, their respective motivations, possible attack surface, and what measures need to be taken to improve defenses against a potential attack.

#2 Collection: We set up systems and processes to collect the data required, from a wide range of sources both internal and external, to satisfy the objectives defined in the first stage. It is important that teams collect data

#3 Processing: Essentially evaluating the data’s reliability and relevance before it can be analysed. This stage involves sorting and organising the data, which may include removing any false positives or redundancies.

#4 Analysis: We analyse the available data to arrive at answers to the questions created in the planning stage of the life cycle. The main objective of this stage is to convert processed data into the context required for the intended audience i.e. valuable recommendations and action items.

#5 Dissemination: The StickmanCyber threat intelligence team presents their analysis in a report format fit for the intended audience outlined in the planning stage. For example, if the audience is executive management, then the threat intelligence needs to be in a format that can be easily consumed i.e. no technical jargon and concise, to the point.

#6 Feedback: We take feedback on the provided report to determine whether improvements need to be made for future threat intelligence activities. Stakeholders may have changes to their priorities or adjustments to how data should be disseminated or presented.