This repository includes the references used for the presentation titled "Still thinking about your Ex(cel)? Here are some TIPs" (alternative title is The past, present and future of Threat Intelligence Platforms). The presentation took place during SANS CTI Summit 2021 on 22 January 2021.
- SANS CTI Summit 2020 - Andreas Sfakianakis - Stop Tilting at Windmills: Three Key Lessons that CTI Teams Should Learn from the Past - https://www.youtube.com/watch?v=kGqnCR6XOhQ
- Gartner - Technology Overview for Threat Intelligence Platforms - https://www.gartner.com/doc/2941522/technology-overview-threat-intelligence-platforms
- Lockheed Martin - Practical Steps To Securing Process Control Networks - https://docplayer.net/9025143-Practical-steps-to-securing-process-control-networks.html
- SANS - CTI Survey 2020 - https://www.sans.org/reading-room/whitepapers/analyst/2020-cyber-threat-intelligence-cti-survey-39395
- SANS - CTI Survey 2019 - https://www.sans.org/reading-room/whitepapers/analyst/evolution-cyber-threat-intelligence-cti-2019-cti-survey-38790
- SEI Carnegie Mellon University - Cyber Intelligence Tradecraft Report - https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=546686
- ENISA Threat Landscape 2020 - Cyber Threat Intelligence Overview - https://www.enisa.europa.eu/publications/cyberthreat-intelligence-overview
- SANS CTI Summit 2016 - Rick Holland - Threat Intelligence Awakens - https://speakerdeck.com/rick_holland/threat-intelligence-awakens
- RSA 2015 - Rick Holland - Threat Intelligence Is Like Three Day Potty Training - https://www.slideshare.net/cisoplatform7/cxo-t08rthreatintelligenceislikethreedaypottytraining
- FireEye - Excelerating Analysis – Tips and Tricks to Analyze Data with Microsoft Excel - https://www.fireeye.com/blog/threat-research/2019/12/tips-and-tricks-to-analyze-data-with-microsoft-excel.html
- FireEye - Excelerating Analysis, Part 2 — X[LOOKUP] Gon’ Pivot To Ya - https://www.fireeye.com/blog/threat-research/2020/04/excelerating-analysis-lookup-pivot.html
- SANS CTI Summit 2016 - Scott J Roberts - Community Intelligence & Open Source Tools: Building an Actionable Pipeline - https://speakerdeck.com/sroberts/community-intelligence-and-open-source-tools
- ENISA - Andreas Sfakianakis, Razvan Gavrila - Exploring the opportunities and limitations of current Threat Intelligence Platforms https://www.enisa.europa.eu/publications/exploring-the-opportunities-and-limitations-of-current-threat-intelligence-platforms
- Intel471 - Mark Arena - Cyber threat intelligence: maturity and metrics - https://www.slideshare.net/MarkArena/cyber-threat-intelligence-maturity-and-metrics
- threatintel.eu - Exceling at Threat Intelligence Platform (TIP) requirements - https://threatintel.eu/2021/01/22/exceling-at-threat-intelligence-platform-tip-requirements/
- Andy Piazza - https://medium.com/@andy.c.piazza/an-analysts-need-for-a-threat-intelligence-platform-43f9258ac22d
- threatintel.eu - Andreas Sfakianakis - A Study on Threat Intelligence Platforms (TIPs) - https://threatintel.eu/2018/04/04/a-study-on-threat-intelligence-platforms/
- WI 2017 - C. Sauerwein, C. Sillaber, A. Mussmann and R. Breu- Threat Intelligence Sharing Platforms: An Exploratory Study of Software Vendors and Research Perspectives - https://wi2017.ch/images/wi2017-0188.pdf
- WISCS 14 - O. Serrano, L. Dandurand and S. Brown - On the design of a cyber security data sharing system - https://dl.acm.org/doi/10.1145/2663876.2663882
- WISCS 15 - S. Brown, J. Gommers and O. Serrano, - From Cyber Security Information Sharing to Threat Management - https://dl.acm.org/doi/abs/10.1145/2808128.2808133
- WISCS 16 - C. Sillaber, C. Sauerwein, A. Mussmann and R. Breu, - Data Quality Challenges and Future Research Directions in Threat Intelligence Sharing Practice - https://dl.acm.org/doi/10.1145/2994539.2994546
- Adam Zibak and Andrew Simpson - Cyber Threat Information Sharing: Perceived Benefits and Barriers - https://www.researchgate.net/publication/335084010_Cyber_Threat_Information_Sharing_Perceived_Benefits_and_Barriers
- Alessandra de Melo e Silva, João José Costa Gondim, Robson de Oliveira Albuquerque and Luis Javier García Villalba - A Methodology to Evaluate Standards and Platforms within Cyber Threat Intelligence - https://www.mdpi.com/1999-5903/12/6/108/pdf
- Sara Bauer, Daniel Fischer, Clemens Sauerwein, Simon Latzel, Dirk Stelzer, Ruth Breu - Towards an Evaluation Framework for Threat Intelligence Sharing Platform - https://scholarspace.manoa.hawaii.edu/bitstream/10125/63978/1/0193.pdf
- threatintel.eu - Andreas Sfakianakis - TIPs: An Exploratory Study of Software Vendors and Research Perspectives - https://threatintel.eu/2017/02/27/tips-an-exploratory-study-of-software-vendors-and-research-perspectives/
- BSidesNOVA - Jason Wonn - TIP of the Spear: A Threat Intelligence Platform Acquisition https://www.youtube.com/watch?v=ynm90wZLjNY&feature=emb_logo
- FIRST CTI 2019 - Pasquale Stirparo - Your requirements are not my requirements - https://www.first.org/resources/papers/london2019/1430-1500-Your-Requirements-are-Not-My-Requirements-Speaker-Pasquale-Stirparo.pdf
- Frost & Sullivan - Assessment of the Global Threat Intelligence Platforms Market, Forecast to 2022 - https://www.reportlinker.com/p05974250/Assessment-of-the-Global-Threat-Intelligence-Platforms-Market-Forecast-to.html?utm_source=GNW
| Collaborative Research Into Threats (CRITs) | Open Source |
| Collective Intelligence Framework (CIF) | Open Source |
| Malware Information Sharing Platform (MISP) | Open Source |
| Yeti | Open Source |
| OpenCTI | Open Source |
| threatnote.io | Open Source |
| MineMeld | Open Source |
| ThreatConnect | Commercial |
| Anomali's ThreatStream | Commercial |
| EclecticIQ Platform | Commercial |
| ThreatQuotient | Commercial |
| TruSTAR | Commercial |
| Cyware | Commercial |
| Celerium | Commercial |
| Analyst1 | Commercial |
| LookingGlass | Commercial |
| King & Union | Commercial |
| QuoLab | Commercial |
| Reqfast | Commercial |
| AlienVault Open Threat Exchange (OTX) | Community Threat Exchange Platform |
| IBM X-Force Exchange | Community Threat Exchange Platform |
| MISP Communities | Community Threat Exchange Platform |