So you Wanna Start a TI Program
The talk plans to answer the question of what is a Threat Intelligence program, the level of program suitable for different organization types, what the base investment expectations for such a program are, and what the expected outcomes are in both the functional context and financial ROI context. Attendees should leave this webcast with a base understanding of how to begin a threat intelligence program, the options and tools available in the marketplace to them, and how to apply the data to Incident Response and Threat Hunting programs. The talk will cover a number of popular vendor tools with some comparisons as well as pros and cons, and also employ the data in an EDR (Endpoint Detection and Response) workflow to help highlight workflow automation and optimization enrichment opportunities such a program might grant.
