Sharing is Caring - Understanding & Measuring TI Sharing Effectiveness

This course aims to help participants understand and measure the effectiveness of threat intelligence sharing. By analyzing aggregated data from intelligence sharing communities, participants will learn how to assess the quality and efficiency of threat intelligence feeds. The course teaches participants how to use open source projects like Combine and TIQ-test to evaluate the health of a threat intelligence sharing community and provides insights on improving existing communities. The intended audience for this course includes cybersecurity professionals, threat intelligence analysts, and individuals interested in enhancing their understanding of threat intelligence sharing practices. The teaching method involves analyzing usage data from various threat intelligence platforms and sharing communities to draw conclusions and propose new metrics for evaluation.