Docsity
Docsity

Prepare for your exams
Prepare for your exams

Study with the several resources on Docsity


Earn points to download
Earn points to download

Earn points by helping other students or get them with a premium plan


Guidelines and tips
Guidelines and tips

Building a Threat Intelligence Dashboard: Tools and Resources, Summaries of Computer Fundamentals

A comprehensive overview of the tools and resources needed to build a threat intelligence dashboard. It covers the key steps involved, including defining the scope and sources, data collection and storage, visualization tools, and data visualization techniques. The document also offers additional tips for implementation and maintenance, emphasizing the importance of starting small and iterating, as well as ensuring secure data storage and access. The information presented in this document can be valuable for security professionals, cybersecurity analysts, and anyone interested in developing a robust threat intelligence system to enhance their organization's security posture.

Typology: Summaries

2023/2024

Uploaded on 04/13/2024

demon-slayer-7
demon-slayer-7 🇬🇧

2 documents

1 / 5

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
Building a Threat Intelligence Dashboard: Tools and
Resources
Sure, here are some specific tools and websites you can use for each step of
building your Threat Intelligence Dashboard:
1. Define Scope and Sources:
Threat Focus Resources:
oIndustry Reports:!SANS Institute ( ),!MITRE ( )
Opens in a new window
chevron_right
en.wikipedia.org
SANS Institute logo
oThreat Actor Reports:!Crowdstrike ( ),!Mandiant ( )
Opens in a new window
chevron_right
pf3
pf4
pf5

Partial preview of the text

Download Building a Threat Intelligence Dashboard: Tools and Resources and more Summaries Computer Fundamentals in PDF only on Docsity!

Building a Threat Intelligence Dashboard: Tools and

Resources

Sure, here are some specific tools and websites you can use for each step of building your Threat Intelligence Dashboard:

  1. Define Scope and Sources:  Threat Focus Resources: o Industry Reports: SANS Institute ( ), MITRE ( ) Opens in a new window chevron_right en.wikipedia.org SANS Institute logo o Threat Actor Reports: Crowdstrike ( ), Mandiant ( ) Opens in a new window chevron_right

crowdstrike.com Crowdstrike logo o Geographical Threat Data: Cybersecurity & Infrastructure Security Agency (CISA) ( ) Opens in a new window wikipedia.org CISA logo  Threat Intelligence Feed Sources: o Free Feeds:  MISP ( ): https://www.misp-project.org/ Opens in a new window en.m.wikipedia.org MISP logo  Open Threat Exchange (OTX): https://otx.alienvault.com/  VirusTotal: https://www.virustotal.com/ o Commercial Feeds:  Palo Alto Networks: https://unit42.paloaltonetworks.com/  Crowdstrike: https://www.crowdstrike.com/en-us/

Opens in a new window en.wikipedia.org OpenRefine logo o Trifacta Wrangler ( ): https://www.alteryx.com/about-us/trifacta-is-now- alteryx-designer-cloud Opens in a new window en.wikipedia.org Trifacta Wrangler logo  Storage Solutions: o Cloud storage platforms like:  Amazon Web Services (AWS): https://aws.amazon.com/  Microsoft Azure: https://azure.microsoft.com/en-us  Google Cloud Platform (GCP): https://cloud.google.com/ o On-premises databases like:  MySQL: https://www.mysql.com/  PostgreSQL: https://www.postgresql.org/

  1. Visualization Tools:  Open-source options:

o Kibana: https://www.elastic.co/guide/en/kibana/current/ introduction.html (part of ELK Stack) o Grafana: https://grafana.com/  Commercial options: o Tableau: https://www.tableau.com/ o Power BI: https://powerbi.microsoft.com/en-us/desktop/

  1. Data Visualization Techniques:  General charting libraries: o Matplotlib: https://matplotlib.org/ (Python) o Seaborn: https://seaborn.pydata.org/ (Python)  Interactive visualization libraries: o Bokeh: http://bokeh.org/ (Python) o Plotly: https://plotly.com/ (Python, JavaScript)
  2. Implementation and Maintenance:  Dashboard deployment platforms: o Kibana (part of ELK Stack) o Grafana o Tableau Server o Power BI Service Additional Tips:  Explore community resources: Many of these tools have active communities with tutorials, forums, and examples.  Start small and iterate: Don't try to build everything at once. Start with a basic dashboard and gradually add more features and data sources.  Security is important: Make sure your data is stored and accessed securely, especially if you are using cloud storage. I hope this helps!