The Hybrid Analyst - How Phishing Created A New Type of Intel Analyst

Explore the evolution of threat intelligence analysis through a conference talk that delves into how phishing attacks have given rise to a new breed of hybrid analyst. Learn about the importance of tracking phishing, various information sources, and the speaker's experience with CSIRT. Discover techniques for scoping phishing attempts, identifying patterns, and collaborating with detection teams. Gain insights into different types of phishing, effective reporting templates, and the significance of collective analysis in combating cyber threats. Acquire practical knowledge on leveraging templates for enhanced threat intelligence and participate in a Q&A session to further understand this emerging field.

Intro
RACHEL GIACOBOZZI
AGENDA
THREAT INTELLIGENCE
WHY TRACK PHISHING
SOURCES OF INFORMATION
MY MONTH WITH CSIRT
WHAT I CAN DO NOW
SCOPING A PHISH
EXAMPLE EMAIL
FINDING PATTERNS
WORKING WITH DETECTION
TYPES OF PHISHING
REPORT TEMPLATE
EXAMPLE REPORT CONT
COLLECTIVE ANALYSIS MATTERS
WHAT CAN I DO WITH A TEMPLATE
RECAP
QUESTIONS