Analytic Tradecraft in the Real World - SANS CTI Summit 2019

Cyber threat intelligence is built on a traditional intelligence framework. Often, information security focuses on scientific concepts that entail a systematic approach that uses observable, testable, and repeatable data. However, understanding the application of traditional intelligence tradecraft and the value beyond collecting IOCs provides a foundation for a more robust, proactive response to threats. This presentation will highlight 10 analytic tradecraft skills derived from the CIA’s Directorate of Intelligence and will show how these skills relate to real-world scenarios.

Amy R. Bejtlich, Cyber Threat Analyst, Dragos