Tagged articles

TTP

3 articles · Page 1 of 1

Aug 27, 2026 · Information Security

Why More Threat Intelligence Makes Security Decisions Harder

This article explains why accumulating threat intelligence often fails to improve security decisions, and proposes a four-gate framework—relevance, credibility, observability, actionability—to translate external signals into internal judgments, emphasizing TTP-based analysis and reusable judgment processes over raw data collection.

MITRE ATT&CKNIST SP 800-150TTP

0 likes · 10 min read

Why More Threat Intelligence Makes Security Decisions Harder

Frontline Investigation

Jun 30, 2026 · Information Security

Beyond IOCs: Turning Threat Intelligence into Actionable Disposal Clues

The article explains why many threat intelligence platforms generate noise instead of actionable clues, proposing a four-layer operational model (data, matching, judgment, action) and a risk-prioritization framework (exposure, exploitability, impact, actionability) to bridge the gap between raw IOCs and effective security response.

CISA KEVEPSSIOC

0 likes · 14 min read

Beyond IOCs: Turning Threat Intelligence into Actionable Disposal Clues

Frontline Investigation

Jun 21, 2026 · Information Security

Beyond IOCs: Building a Closed-Loop Threat Intelligence Operations Framework

This article explains how to move threat intelligence from static IOC collection into a five-step closed loop—collect, normalize, correlate, remediate, review—integrating with assets, vulnerabilities, logs, and ticketing to prioritize real risks, avoid alert fatigue, and enable actionable security operations.

IOCMITRE ATT&CKTTP

0 likes · 16 min read

Beyond IOCs: Building a Closed-Loop Threat Intelligence Operations Framework