On this #cybersunday, I am talking about #threatintel. Specifically, I am talking about how you need to know your use case when you're asking about threat intel vendors or feeds. Are you looking for a full threat intelligence platform (TIP)? Or do you just need an intel feed or two to give you context in your SIEM/SOC? Or is it something else? Choose wisely!
Some free threat intel resources:
-
https://www.cisa.gov/ais
-
https://isc.sans.edu/
-
https://attack.mitre.org/