From scattered feeds to connected intelligence: Co-presenting OpenCTI with NVISO
In this joint session, Filigran and NVISO load NVISO threat intelligence into OpenCTI and use it to answer three questions every CTI team faces.
Topic
When & Where
Details
Format:
Lecture
Language:
English
Session description
Jermain Njemanze, VP of Solution Engineering, Filigran
Pierre-Alain Mouy, Managing Partner, NVISO
Most threat intelligence teams don't lack intelligence. They have too much of it, spread across vendor reports, open-source feeds, MISP events and incident cases, with no shared model for comparing or trusting it. In this joint session, Filigran and NVISO load NVISO threat intelligence into OpenCTI and use it to answer three questions every CTI team faces.
How do we consolidate intelligence from multiple sources?
NVISO, open-source and internal sources are brought into one STIX 2.1 knowledge base. When two sources report the same thing, it is merged into one record, so overlap shows up as corroboration rather than noise.
How do we understand how threats are conn ...
