Skip to main content
NewsPublished

The current state of Threat Intelligence Tooling

Source Reddit Cybersecurity

0

Discussion

This entry is a discussion post on Reddit about the current state of threat intelligence tooling. The author shares their experience developing a threat intelligence investigation platform that aims to streamline workflows and leverage AI to accelerate development, but not to automate analysis. The post invites feedback and testing of the tool hosted on huntingbadguys.online. There is no indication of a security vulnerability or active threat in the content.

r/cybersecurity (opens in a new tab)u/Agile_Tea_52150 points0 comments

Hello folks,

I've been in threat intel for more than 3 years now, worked on a lot of projects, some of them more interesting than others (and I'm not talking about the business value here :) ), but I always try to automate some boring tasks to give a prominent value to the work I can give bc as you know we are limited by time and ensure that my focus goes to the tasks that really deserve my attention as an analyst. So I found myself creating a tool which helps me investigate, capitalize and visualize intelligence, so my investigation is done in one platform and I have all the elements I need as much as it's possible in the said platform (people will argue with OpenCTI, or MISP, or other stuff, but I really think from experience that their workflow isn't as smooth as my platform for an investigation, even though they are great aggregators.). I wouldn't lie but I did in fact use a lot of AI for this build to speed up the process, but there isn't a single feature that I have done which implements the AI in the workflow. I'd like to know if some other infosec people tried to build projects but not focusing around implementing AI but more using AI as an accelerator to speed up the development, and if you can share your project with us so we can test it and give you feedback. I'm sure there are some projects which deserve to shine, and preferably if it's open-source it will be more appreciated.

For those who'd like to test my project, I've hosted it on huntingbadguys.online and ofc any feedback will be appreciated.

References

Community reviews

Loading reviews…