Analysis

Turning collected material into an assessment somebody can act on.

The Big 5 attack vectors

The Big 5 are the five methods by which nearly all attacks arrive: phishing, malware, denial of service, hacking and insider threat. Organising intelligence around the vector, the how, rather than around the threat actor, the who, gives a team defences that hold against adversaries it has never heard of, and a structure that non-specialists can read.

Read · 8 min →

Topics

AI and LLMs in cyber threat intelligence

AI in cyber threat intelligence means using machine learning and language models to process volume, automate routine analysis and surface patterns, while the questions …

Read →

MITRE ATT&CK, and why TTPs beat actor names

MITRE ATT&CK is a structured, public catalogue of adversary tactics, techniques and procedures observed in real intrusions. For an intelligence team it works as …

Read →