Threat intelligence is knowledge that allows you to prevent or mitigate cyberattacks. Rooted in data, threat intelligence gives you context that helps you make informed decisions about your security by answering questions like who is attacking you, what their motivations and capabilities are, and what indicators of compromise in your systems to look for. reference:https://www.recordedfuture.com/threat-intelligence-definition/

1. Threat Intelligence
SOC

2. What is Threat Intelligence
• Information that an organization use to understand the
threats that have will Or currently targeting the
organization .
• This information is use to prepare , prevent and identify
cyber threats looking to take advantage of valuable
resources.

3. Information
Techniques
Attacker Tools
System art facts
Domains
Hash , Ip address Hard for hackers
Tough Trials

4. Frame works
Threat Hunting
Tools tech , Procedures
Short term Prediction
Long term Prediction

5. How to protect our organization?
• Beware of new threats
• Cert cyber emergency response team
• If your organization detect a new malware activity that has never seem
Share it with world.
• If virus occurs anywhere in the world . You can check that.
• https://www.pakcert.org
• https://www.us-cert.gov
Incident response Team (IT incident , computer incident)

6. Types of security incidents
• A distributed denial of service (DDOS) attack against critical cloud services.
• A malware or ransomware infection that has encrypted critical business files
across the corporate network.
• A successful phishing attempt that has led to the exposure of personally-
identifiable information of customers.
• An unencrypted laptop known to have sensitive customer records that has
gone missing.

7. What we have learned
• What is threat intelligence
• What is information in threat intelligence
• Frameworks of threat intelligence
• How to protect organization
• Types of incident

8. GD BYE