Live, interactive cybersecurity training available through SANS Live Online. View upcoming events.

Frankfurt December 2019

Frankfurt, Germany | Mon, Dec 9 - Sat, Dec 14, 2019
This event is over,
but there are more training opportunities.

5 Years of Applied CTI Discipline: Where Should Organisations Put Focus On?

  • Andreas Sfakianakis
  • Tuesday, December 10th, 8:00pm - 8:30pm

Since the publication of Mandiants APT1 report in 2013, the Cyber Threat Intelligence discipline has been widely adopted by organisations globally. We have observed success stories, as well as fails of organisations trying to develop CTI capabilities or, in other words, adding value to business. As a community, it is critical to capture the relevant lessons learned and conduct a status check for these 5 years of applied CTI discipline.

The utmost goal of this presentation is to identify the areas that organisations should put more focus on. Based on assessment, Andreas will identify and deep dive into the three major areas where most current CTI teams struggle: 1) intelligence direction (such as stakeholder identification and collection of intelligence requirements), 2) intelligence reporting and dissemination and 3) CTI analyst skill sets.

Key takeaways of this presentation include:

  • The realization of the significance of intelligence requirements for the intelligence cycle
  • How proper stakeholder identification increases situational awareness
  • How classic intelligence approaches can be applied to CTI production
  • Success stories on disseminating intelligence products and capturing feedback
  • Understanding the variety of competencies of CTI teams and ways of baselining analysis process within CTI teams

Location: Ballsaal 1


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
Tuesday, December 10
Session Speaker Time Type
Higher Value Pentesting and Minimum Viable Methodologies Chris Dale Tuesday, December 10th, 6:00pm - 7:00pm SANS@Night
Lazarus APT vs Banking Sector: Combining CTI & DFIR to Investigate APT Intrusions Jess Garcia Tuesday, December 10th, 7:00pm - 8:00pm SANS@Night
5 Years of Applied CTI Discipline: Where Should Organisations Put Focus On? Andreas Sfakianakis Tuesday, December 10th, 8:00pm - 8:30pm SANS@Night
Wednesday, December 11
Session Speaker Time Type
SANS Frankfurt Social Night Wednesday, December 11th, 6:00pm - 8:00pm Special Events
Friday, December 13
Session Speaker Time Type
SANS Frankfurt Xmas Jumper Day Friday, December 13th, 9:00am - 5:00pm Special Events