Intelligence-Driven Incident Response: Outwitting the Adversary

Threat intelligence—understanding the who, why, and how of attacks—is most valuable when applied directly to an organization’s incident response capability for hunting and investigation. Threat intelligence has become more common and important in recent years. However, many professionals want a better understanding of how to apply this intelligence within their operations and organizations. This book explains the fundamentals of intelligence analysis and the best ways to apply it to your incident response function.

威脅情報 - 了解攻擊的來源、原因和方式 - 在應用於組織的事件回應能力以進行狩獵和調查時最有價值。近年來，威脅情報變得越來越普遍和重要。然而，許多專業人士希望更好地了解如何在他們的運營和組織中應用這些情報。本書解釋了情報分析的基本原理以及如何將其應用於您的事件回應功能。