How Threat Intelligence Helped Us Defend and Respond to a Nation-State-Sponsored Threat Actor

This paper presents a comprehensive analysis of a real-world incident, referred to as "The D.R. Incident," when the Dominican Republic National Computer Security Incident Response Team (CSIRT) we uncovered a sophisticated threat actor compromising a wide spectrum of targets, including governmental, private, and critical infrastructure entities.

The core focus of this paper revolves around the instrumental role played by threat intelligence in both defending against and responding to the nation-state-sponsored threat actor. We delve into the utilization of publicly available …

actor analysis computer computer security critical critical infrastructure csirt dominican republic entities incident incident response incident response team infrastructure intelligence nation national private real respond response security security incident security incident response team spectrum sponsored state state-sponsored threat actor team threat threat actor threat intelligence uncovered world