From Threat Intelligence to Rapsheets in Just a Few Steps - DefCamp - 2016

Explore a comprehensive talk from DefCamp 2016 on transforming threat intelligence into actionable rapsheets. Delve into topics such as virus scanning, honeypots, phishing, and passive DNS. Learn about system overview, facts, and the rationale behind the chosen model. Discover insights on data storage, modeling, and the benefits of graph-based approaches. Examine scaling strategies, statistics, IP age distribution, and malicious IP addresses by country. Gain knowledge about sandbox environments and their role in threat analysis. This presentation from Central and Eastern Europe's premier Hacking & Information Security conference offers valuable insights for security specialists, decision-makers, and developers in the INFOSEC field.

Intro
Virus Scanning
Honeypots
Phishing
Passive DNS
System Overview
System Facts
Why this model
Storage
Data Model
Why graph
Scaling up
Stats
IP Age Distribution
Malicious IP Addresses by Country
Question
Sandbox
Malicious