Mastering Intelligence Led Security Operations

Overview

Discover how our teams, including the Threat Management Centre and Incident Response Team, work in harmony to transform raw data into actionable intelligence. We’ll also introduce you to our specialist tools, Niffler and Sherlock, which enhance our threat intelligence capabilities. Using real-world examples, we’ll demonstrate how a cohesive strategy based on the foundational principles of intelligence analysis can lead to quicker threat attribution, improved scoping, and a significant reduction in dwell time, all while protecting your business against an evolving threat landscape.

What you will learn

A “Force Multiplier” for your security: Understanding the benefits of interoperability between our Security Operations Centre (SOC) and Cyber Security Incident Response team (CSIRT) and how a unified platform, process, and team enhance operational performance.
The foundations of intelligence analysis: A look at the principles of intelligence analysis, inspired by “the father of intelligence analysis,” Sherman Kent and how we apply these principles to our threat intelligence services.
Our threat-driven approach: We define and understand modern adversaries and the threats they pose by using an intelligence cycle approach to assess their motivation and intent, and integrate critical, political, economic, and technical intelligence factors.
Our cutting-edge tools and technology: You will get an overview of our advanced collection dotools and AI integration, including Niffler and Sherlock, which are our specialist tools for automated threat intelligence and data enrichment.
Case study: An integrated ecosystem in action: See how our Threat Management Centre (TMC), SOC, and CSIRT work together to investigate and respond to a real-world threat, with a demonstration of a recent SOC investigation.

Featured Speakers

Stefan Hechler

Line Manager Threat Management Centre

Callum Williams-Kinnaird

Cyber Defence Specialist – Intelligence