ZackMar 25
Taggart
It is my sincere belief that TLP:CLEAR should be the default and any restriction of threat intelligence should require significant justification.
Mar 25 at 5:59pmWeb
Show threadMartin Boller     Mar 25
@mttaggart Thanks, just said something similar (less eloquent). We need to share fast and all of it unless there's ample justification not to.
Show threadTaggartMar 25
@itisiboller Sharing info time and again is shown to advantage defenders. The counter-examples are outliers.