Sales And Marketing Are Threat Actors, Too

Подробнее о видео

Many intelligence analyses of contemporary threat actors have pointed out their business-like operations. What if they’re even similar to us, the defenders? What if they’re - gasp - doing the same things as SALES and MARKETING? Moreover, what if understanding those tactics could help you create better threat intelligence products and teams?

We will identify common ground between modern technical sales and marketing disciplines and threat actor operations. Of course, we’ll use the MITRE ATT&CK(r) framework to categorize parallels between marketing and threat actor tactics, techniques, and procedures (TTPs). How do marketers perform reconnaissance? What resources do they develop and use? How do salespeople achieve initial access, escalate privileges, and evade defenses? We’ll tell you a few secrets from inside the sales and marketing cubicles.

Then, we’ll relate these tactics to some real threat actor TTPs. Using public reporting from several cyber threat intelligence (CTI) organizations, we’ll align known cyber threat actor activities with similar sales and marketing activities. Could threat actors use the same TTPs as your friendly salesperson and event marketer?

We’ll also show how criminal threat actor groups are marketing themselves to achieve greater success.

We will also identify some sales and marketing TTPs that CTI analysts can use in intelligence analysis. Some are openly available, and some cost money… but your marketing department probably has access.

Decoding cyber threats: A Practical Guide to using Attack Trees

We’ll recommend ways to improve CTI by using marketing and sales tactics. How can you better defend yourself against S&M and threat actors? How can you exploit the vendor-customer relationship to your benefit? Should you start looking at marketers as potential threat analysts?

And, finally, want to spend less time on annoying cold calls? We’ll disclose the top five ways (you won’t believe number three!) And one weird trick that will radically improve your experience with salespeople!!!

Key takeaways include:
-Understanding how you could use marketing tools to create faster and more contextualized threat intelligence investigations;
-Identifying skills from other disciplines that could make you a better analyst;
-Learning how to interact with sales and marketing that creates better outcomes for both parties and
-An unexpected way you might grow your team.

View upcoming Summits:

SANS Cyber Threat Intelligence Summit 2025
Sales And Marketing Are Threat Actors, Too
Erica Peterson, Director of Sales and Marketing, The Vertex Project
Michael Graven, Director