In today’s cybersecurity environment, threat intelligence has become an important tool in cyber defense. However, cybersecurity teams can be overwhelmed with the amount intel they have access to and the task of evaluating and processing that intelligence. DIR Cybersecurity Operations team has faced these issues and worked to resolve them. We would like to share our lessons learned. This presentation would address the need for timely intelligence using data from CyberOps participation in the Department of Homeland Security funded Johns Hopkins University – Applied Physics Lab Automated IOC Exchange pilot. Presenters would explain how to evaluate intelligence feeds using the high-low block risk scale. And lastly, in more detail, the discussion would center on how to apply the vetted intelligence within tools and technologies to provide a more secure organizational posture.

Session Objectives: Gain a better understanding of the need for speed with cyber intelligence, the High-Low Block Risk scale and how to use it, and how intelligence can be used to enhance security.