A Case Study on Identifying Gaps in Detection and Enhancing CTI Value for the Organization

Подробнее о видео

This presentation will explore how Cyber Threat Intelligence (CTI) can be strategically utilized to enhance detection engineering, focusing on identifying and addressing detection gaps within an organization. Through a real-world case study, the session will illustrate how CTI can not only pinpoint weaknesses in detection systems but also provide actionable strategies that enhance the overall security posture. The presentation will emphasize how to translate threat intelligence into detection enhancements, offering practical insights for teams looking to maximize the organizational value of CTI.

Key Takeaways:
• A detailed case study showcasing how CTI was leveraged to identify detection gaps in an operational environment.
• Practical approaches for integrating threat intelligence with detection engineering to optimize security measures and workflows.
• A step-by-step process for converting CTI insights into actionable detection strategies that enhance security operations.
• Lessons learned from applying CTI to continuously improve detection systems and increase its value for the organization.

View upcoming Summits:

SANS Cyber Threat Intelligence Summit 2025
From Threat Intelligence to Detection Engineering: A Case Study on Identifying Gaps in Detection and Enhancing CTI Value for the Organization
Pedro Barros, Security Analyst II, CODE