DocIntel: A Context-Centric Cyber Threat Intelligence Platform

SANS Cyber Threat Intelligence Summit 2023

DocIntel: A Context-Centric Cyber Threat Intelligence Platform
Antoine Cailliau, Threat Researcher, Belgian Defence

An increasing number of documents reporting cyber incidents, vulnerabilities, novel offensive and defensive techniques are shared on a daily basis among various public and private communities. This collective knowledge needs to be collected, processed and organized for the cyber threat intelligence (CTI) analysts to search and investigate. The large volume and diversity of knowledge available form a key challenge for analysts …

actionable analysts challenge communities context cti cyber cyber incidents cyber threat cyber threat intelligence daily data defence defensive diversity documents employee expert incidents intelligence key knowledge large novel offensive platform private public reporting researcher sans search staffing summit techniques threat threat intelligence threat intelligence platform vulnerabilities