Contact Sales
Contact Sales

NEW2CTI | Operationalizing CTI: From PIRs to Priority TTPs

NEW2CTI | Operationalizing CTI: From PIRs to Priority TTPs (PDF, 5.60MB)Last updated: 26 Jan, 2026
Presented by:
Ondra  RojcikKeith Swagler
Ondra Rojcik & Keith Swagler

The value of Priority Intelligence Requirements (PIRs) is well-known in CTI, yet many teams, including ours, struggle to translate these high-level concepts into tangible, day-to-day actions of Security Operations, and Cyber Defense activities.

This presentation offers a direct, no-fluff walkthrough of how to transform PIRs from a strategic document into an **engine for proactive cyber defense**. It moves beyond theory, providing a practical, step-by-step guide to operationalizing PIRs.

This talk will equip attendees with the immediate, actionable methodology required to transform strategic Priority Intelligence Requirements (PIRs) from a document into an engine for proactive cyber defense. Participants will leave prepared to integrate intelligence directly into their detection rules, threat hunts, and red team exercises, thereby ensuring a truly threat-informed security posture.

SANS Cyber Threat Intelligence Summit 2026