Contact Sales
Contact Sales

NEW2CTI | Bling-up Your Intelligence Requirements: Enhancing Your CTI Requirements With the Diamond Model Of Intrusion Framework

NEW2CTI | Bling-up Your Intelligence Requirements: Enhancing Your CTI Requirements With the Diamond Model Of Intrusion Framework (PDF, 1.24MB)Last updated: 26 Jan, 2026
Presented by:
Sherman Chu
Sherman Chu

Developing intelligence requirements is a recurring challenge often highlighted by the CTI community. Despite numerous great write-ups, discussions, and presentations on extracting and converting stakeholder needs into intelligence requirements, there is still plenty of room to explore practical ways of using requirements to evaluate and improve CTI lifecycles continuously.

One such method involves leveraging core concepts from the Diamond Model of Intrusion Analysis.

This presentation will examine and walk through how core principles from the Diamond Model can be integrated with cyber threat intelligence requirements. The overall goal is to demonstrate how Diamond Model-driven intelligence requirements enable CTI teams to continually assess and enhance the intelligence cycle, ultimately resulting in improved finished intelligence for stakeholders.

The audience can expect to learn how to practically layer their intelligence requirements with fundamental concepts from the Diamond Model of intrusion analysis. We will also break down how Diamond-model-driven intelligence requirements empower each phase of the intelligence lifecycle.

SANS Cyber Threat Intelligence Summit 2026