From the course: Advanced Cyber Threat Intelligence
Unlock this course with a free trial
Join today to access over 23,100 courses taught by industry experts.
Private data sources part 2
From the course: Advanced Cyber Threat Intelligence
Private data sources part 2
- [Instructor] Now let's move to the third type and final type of private data sources, threat intelligence platforms. Threat intelligence platform is defined as a piece of software or provider's portal, typically developed by security vendor, which organizes one or more feeds into single stream of threat intelligence and that you can use in order to get alerts and manipulate data. Most of these platforms offer a set of benefits that looks like this. They combine thousands of feeds into single location. They enable you to receive alerts in real times. They can normalize feed data. They remove duplicates, enable user-set rules, et cetera. They can be integrated with SIEM solution or firewalls, et cetera. They can create reports, and some of the platforms can also include a feature of a sandbox. Here is an example, Anomali ThreatStream platform. Now, when it comes to advantages and disadvantages of these platforms,…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
Introduction to data collection4m 11s
-
(Locked)
Internal data acquisition6m 38s
-
(Locked)
External data sources7m 7s
-
(Locked)
Private data sources part 18m 37s
-
(Locked)
Private data sources part 23m 42s
-
(Locked)
Community data sources10m 48s
-
(Locked)
Public data sources part 18m
-
(Locked)
Public data sources part 23m 12s
-
(Locked)
Leveraging OSINT part 19m 22s
-
(Locked)
Leveraging OSINT part 26m 50s
-
-
-
-
-
-
-