As someone who has built import/export for STIX/TAXII from scratch, here are a few ways it can be improved.

Grace's presentation at The Diana Initiative introduces the basics of threat intelligence, how to get into your first role and advance a CTI career, debunks a few myths about the job, and provides additional avenues for further inspiration and research.

If your organization has ever gotten an alert for “facebook.com” because someone didn’t vet indicators of compromise properly somewhere along the chain between threat intelligence generation by a third-party and consumption by your security infrastructure, you’re not alone. Facebook might be an extreme example, but it’s

A quick Google search suggests that a consensus has not quite been reached on defining the term “cyber threat intelligence.” There are some blog posts (yep, this one too) and even white papers attempting to assign some specifics or even trying to define threat intelligence by defining what it isn’