Krypt3ia
Found on LinkedIn. While I agree with 99% of it, it also begs the question; “What’s the point anyway?”
Mar 21 at 1:14pmWeb
Show threadKrypt3ia6d ago

I mean, it’s such a gated community already. You get “intel” but ya gotta pay through the nose and the “intel” is, well, meh.

Oh, and the whole ten pages thing, depends on what you have, what you can glean from it, and how much context you can give.

Of course, nowadays no one really reads anyway, right?

MY NEW CTI SERVICE IS PRESENTED ONLY IN HAND PUPPETS AND BOUNCING BALLS OVER SENTENCES TO FOLLOW ALONG AND MOUTHE OUT THE POLYSYLLABIC WORDS!

Show threadcR0w   🏴‍☠️6d ago
@krypt3ia Just go back to the early Mandiant days and make the report simply say "It was China."
Show threadBernard Quatermass6d ago
@krypt3ia obligatory singalong section, https://infosec.exchange/@jfslowik/116189289011902355
Joe Słowik (@[email protected])

Attached: 1 image @[email protected]

Infosec Exchange
Show threadKrypt3ia6d ago
@QuatermassTools
Show threadvpz6d ago
@krypt3ia My experience is that a lot of what comes out of corpo CTI feels like reporting for the sake of reporting. Too many seem to follow some kind of newsie/govie format that has no depth. Leaving the other cybersecurity teams nothing to go on. Can’t make decisions, change strategy, defenses, detections, etc. We asses with moderate confidence that vendor A code name X, aka vendor B code name Y, aka code name Z is doing MITRE id’s 1, 2, 3 as part of ongoing efforts to “make money” in the Americas. Sigh.
Show threadda_6676d ago
@krypt3ia to get paid. I did a thing I was paid for. executives be damned if they decide to do anything about it or not.
Show threadKrypt3ia6d ago
@da_667 Ah, one of the laws of acquisition. Yes, yes, of course, but really, we are just spinning our wheels in this biz.
Show threadda_6676d ago
@krypt3ia yeah. when I do stop to think about that, its incredibly depressing that my life's work will essentially amount to nothing.
Show threadBrahms6d ago

@krypt3ia hm, "tools dont make you a better analyst"

while yes, it is important to have some grasp of what you are doing, otherwise its moot. but the problem with that sentence is it implies you dont require tools (or maybe I am reading it wrong?)

not having proper tooling means I waste more time with doing busywork instead of actual useful stuff. So it certainly is a hard requirement to have tooling at some point.

Show threadBrahms6d ago
@krypt3ia ah, its "wont" ... its definitely not an automatic implication
Show threadKrypt3ia6d ago
@brahms A fool with a tool, is still a fool.
Show threadghost6d ago
@krypt3ia @brahms But the poor fool without the right tool is left in the stool, no matter how much they learnt at school.