Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SANS CTI Summit Inglorious Threat Intelligence

SANS CTI Summit Inglorious Threat Intelligence

From the depths of the Atlantic Ocean to the deserts of North Africa to the formation of the Office of Strategic Services, World War II provides countless lessons for the intelligence analyst. The talk will discuss the evolution of intelligence work at that time and how it had to evolve to address the needs of the intelligence consumer. Rick will draw conclusions from the intelligence successes and failures of the conflict that you can apply to your threat intelligence program

Rick Holland

January 31, 2017

More Decks by Rick Holland

Other Decks in Technology


  1. “Now this is not the end. It is not even

    the beginning of the end. But it is, perhaps, the end of the beginning.”
  2. 1. SOC analyst 2. Threat hunter 3. Chief Information Security

    Officer 4. Other C level executives 5. Business unit / Line of business leader Use personas to better understand your intel customers
  3. • Specific to the individual • What are their triggers?

    • What are they passionate about? • Document! Build dossiers on your intel customers
  4. ‣ 90 Royal Air Force sorties flown ‣ 54 Dutch

    SOE agents died ‣ 83 RAF crew died
  5. “Whenever you will come to pay a visit to the

    Continent you may be assured that you will be received with the same care and result as all those who you sent us before.”
  6. 1. Align to the “strategic purpose” 2. Use personas to

    better understand your intel customer 3. Build dossiers on your intel customer 4. Connect with your intel customer Summary
  7. 5. Don’t let rivalries impact analysis 6. Leave the drama

    at home 7. Structured analytic techniques should be 2nd nature Summary
  8. • Wild Bill Donovan: The Spymaster Who Created the OSS

    and Modern American Espionage • Hitler's Spies: German Military Intelligence in World War II • German Military Intelligence In World War II • Volume 1 War Report Office of Strategic Services Washington Organization, https://searchworks.stanford.edu/view/11645521 • Volume 2 War Report: Office of Strategic Services: Operations in the Field, https://searchworks.stanford.edu/view/11645521 • Analysis of The Personality of Adolph Hitler http://lawcollections.library.cornell.edu/nuremberg/analysis • A Timeline for Using Analytic Techniques Throughout an Analytic Project https://www.cia.gov/library/center-for-the-study-of-intelligence/csi- publications/books-and-monographs/Tradecraft%20Primer-apr09.pdf • The Science of Building Buyer Personas, https://www.singlegrain.com/blog- posts/content-marketing/science-building-buyer-personas/ • Trump and intelligence: 6 ways to deal with challenging intelligence consumers https://www.digitalshadows.com/blog-and-research/trump-and-intelligence-6- ways-to-deal-with-challenging-intelligence-consumers/ • Two ways to effectively tailor your intelligence products https://www.digitalshadows.com/blog-and-research/two-ways-to-more- effectively-tailor-your-intelligence-products/ References: