Episode #008: Getting Started with Cyber Threat Intelligence (CTI) with Chris Horsley

Tash Postolovski
Tash Postolovski
Technical Marketing Manager
Chris Horsley
Chris Horsley
Chief Technology Officer
Episode #008: Getting Started with Cyber Threat Intelligence (CTI) with Chris Horsley
April 1, 2025

Can one analyst with zero budget start a Cyber Threat Intelligence (CTI) program?

Yes! In fact, you may already have started a small threat intelligence program without even realising it.

In this interview with Cosive CTO and renowned CTI expert Chris Horsley we delve into the following questions on how analysts and teams can start a threat intelligence practice with limited resources:

Our discussion covers:

  • What is CTI and what purpose does it serve today?
  • What makes for a good threat intelligence analyst?
  • How can one analyst get started with collecting, sharing and analysing threat intelligence?
  • What are the biggest mistakes SecOps and CTI teams make when first getting started with threat intelligence?
  • What makes for a successful threat intelligence program?
  • How can analysts make the most of what they've already got, even without a big budget for expensive tools and commercial feeds?
  • What are two things analysts can do today to get experience with collecting and sharing threat intelligence?

Subscribe to the podcast for more educational SecOps and Threat Intelligence discussions like this one.

‍

Related posts

Browse all articles
February 21, 2024

7 MISP Best Practices: Lessons from Effective Threat Intel Teams

MISP is a powerful open source threat intelligence and sharing platform used by countless SOC teams around the world. Getting a barebones MISP instance up and running is well within the skill-set of most SOC teams. Download MISP, run it on a VM, and log in to the MISP admin console using default credentials… all within about 10 minutes. That part is easy. Now for the hard part: how do you get from a barebones MISP install to actually using MISP to solve real-world cybersecurity problems? Making that leap can be much more complex and challenging than it may seem on the surface.

February 21, 2024

Securing REST API Endpoints (or 15 Steps to Avoid Another Optus)

Unless you have been living in a cave on Mars with your eyes shut and your fingers in your ears for the past few weeks, you have probably heard something about a data breach at Australian telecommunications giant Optus. At Cosive, we work with organisations every day to prevent data breaches like this from happening. Here, we share 15 actionable steps that organisations to secure their API endpoints and “avoid another Optus”.