What are your preferred sources for threat intelligence?
Sort by:
Director of Information Security Operations in Consumer Goods3 years ago
My current mssp threat hunting sources, and any open source available
Director, Infrastructure, Operations & Security in Consumer Goods3 years ago
Mandiant, Proofpoint
Chief Information Security Officer in Finance (non-banking)3 years ago
Open Threat Exchange, CISA, SANS
Director in Construction3 years ago
We don't have any paid sources. Primary source is our ISAC, with secondaries being SANS, CISA.
Threat intelligence has become critical and important for preventing attacks. Organisation needs Threat intelligence that may impacting them and must be easily usable. Threat intelligence is best used by a prevention and detection system. Vendor TI feed is a must. We used CrowdStrike EDR, Spotlight and Falcon X, together with a IR retained. The SIEM system was integrated with all the Threat Intelligence built in the system. We then integrated our prevention and detection system with open source Threat Intelligence sources, Government, CISA/CERT, ISAC, OpenCTI, etc.
A combination of commercial, open-source, and vendor threat feeds provided the greatest benefit with the least amount of overlap when utilizing threat intelligence from multiple sources. One have to consider the different open source threat intelligence standards that are evolving