Finding threat intelligence reports

Transcript:

• There are a couple of different ways that you might want to use the threat intelligence reports that are in the office platform.
• The first way we see most people using them is by it clicking on reports that are relevant to your threat school.
• So if we take reports relevant to your attack surface we would click here on this arrow. And this is going to link to all the the intelligence reports that are affecting your threat school as they relate to your threat school.
• One of the questions that comes up point often is why are you telling me this information? So if we take this particular one, this is because it's about a vulnerability this particular CVE right here.
• Which is appearing on this company's attack surface. And that's why this report has been surfaced. You can then just use the intelligence tab to search at very vast database of intelligence reports.
• You can do that a few different ways. So you can look at the information. Look at objectives of threat actors to be able to find reports that relate to those.
• The same goes for infection vectors or sectors if you want to look at reports as they relate to your particular sector.
• So if we click into one of these as an example, then we're going to and I'm going to clear that and then we can also search so if we wanted to search by a particular threat actor for an example we could search for APT 31 and that's then go.
• So, we're going to bring up any reports that we have that relate to that particular threat actor. You can obviously put in here any keywords that you like and you can change the date as well if you want to find things that are older or more recent.