CTI – Cyber Threat Intelligence
Prevention, Response, and Strategic Support
Through Intelligence
Proactive Cyber Threat Intelligence
DefendEdge’s Cyber Threat Intelligence (CTI) team conducts active monitoring and analysis of threat actors, campaigns, and emerging vulnerabilities and exploits; providing actionable intelligence products for stakeholders. Through the intelligence process, the CTI team facilitates preventative, response, and strategic support functions for the Security Operations Center, Incident Responders, and our Clients.
The team’s nickname, “Vanir” (vɑ:nɪr), comes from the mythological group of Norse gods associated with wisdom and future sight.
Cyber Threat Intelligence
noun
1. Analyzed information about the hostile intent, capability, and opportunity of an adversary (threat) that satisfies a requirement.
2. Information or data that has been exploited and can be leveraged or otherwise informs a decision.
Intelligence Driven Threat Hunting
Threat Actors Database and Threat Hunting Interface
http://qcx.sup.mybluehost.me/wp-content/uploads/2022/08/Quick-Preview.mp4
Entities operating international or limited in scope, state-sponsored or freelance, with any attack type or motive – the DefendEdge CTI team tracks multiple hundreds of threat actors and advanced persistent threat actors for attribution, analysis, countermeasure planning, and incident response.
CTI Products and Capabilities
Prevention, Response, and Strategic Support Through Intelligence
Vanir’s flagship initiative. The CTI team actively tracks hundreds of threat actors and advanced persistent threat actors, both state-sponsored and non-nation state actors, across the globe, providing enhanced attribution and correlation capabilities to the SOC and for CTI use.
Intelligence analysis is the core competency of the CTI team. DefendEdge’s team provides timely and actionable intelligence reports, on-demand, for clients through in-depth analysis and understanding of the stakeholder’s needs. We help drive your business security decisions.
DefendEdge clients can subscribe to multiple recurring intelligence products including:
– Cyber Advisory (weekly)
– 4+1 Threat Actors Report (monthly)
– Global Threat Summary (semi-annually…)
– Threat Actor Profiles (coming soon…)
– Flash Advisory (coming soon…)
Team Vanir manages the iDNA threat intelligence platform. iDNA monitors for compromised credentials, social media accounts, and web domain records, protecting against customer fraud, digital asset piracy, executive impersonations, and brand and reputational risk.
The CTI team, in concert with the security engineering and SOC teams, conducts in-depth vulnerability assessments of client environments using the latest in vulnerability management tools. We create detailed and actionable reports, to inform the client of vulnerabilities and remediation steps to secure their network.
More capabilities and products coming soon…
Cyber Threat Intelligence provides actionable intelligence to those who need it, when they need it.
Preventative
Function
- SOC Support
- Information Awareness
- Countermeasure Planning
Response
Function
- Incident Response Support
- Forensics Analysis Support
- Supports Remediation Plans
Strategic Support
Function
- Risk Assessment/Mitigation Planning
- Supports Business Decisions
- Informed Resource Prioritization