Thereâs More to Threat Intelligence Than Dark Web Monitoring>
Security Boulevard – Gilad Zahavi
Be Wherever Adversaries Are Coverage of all layers of the web is necessary, yet even with expanded monitoring of additional layers of the web, an organizationâs external threat intelligence picture remains incomplete and one-dimensional. There are additional threat intelligence sources to cover in order to get a complete threat intelligence view that is optimized for the needs of an organization. These include: Online Data Sources ⢠The surface web for security bulletins, vulnerability DBs, IoC feeds, CERTs notifications, etc. ⢠The deep web for its hacking forums, bot markets, malware testing and black markets. ⢠The private web for closed circles, calls for action, technical discussions and target lists. ⢠The dark web for ransomware sites, exploits, zero-days, illegal trade in critical assets and sensitive data leaks. ⢠Social networks for scam reporting platforms and data sharing sites. ⢠Messaging apps for closed groups and hacktivistsâ communication channels. Human Intelligence Technology Partnerships Context is (Still) King
Link: https://securityboulevard.com/2021/11/theres-more-to-threat-intelligence-than-dark-web-monitoring/