• Knowledge Forum B
• Technology lecture
• Forums it-sa Expo

How to Increase Incident Response Efficiency With Security Intelligence

Now more than ever, incident response teams on the front lines of cyber defence require actionable intelligence to help cut through the noise and respond quickly to real threats. In SOC environments where minutes matter, a constant volume of low-quality alerts from threat data feeds equates to wasted time and resources. In this presentation, Mikael Mork, Northern Europe Solutions Engineer at Recorded Future, shares insight into how security intelligence can minimise the pressure on incident response teams by automatically identifying and dismissing false positive alerts, enriching alerts with real-time context from across the open and dark web, and comparing information from internal and external data sources to identify genuine threats.