>> Now let's move to the third type and
final type of private data sources.
Threat intelligence platforms.
Threat intelligence platform is
defined as a piece of software or providers portal,
typically developed by security vendor,
which organizes one or more feeds into single stream of
threat intelligence and that you can
use in order to get alerts and manipulate data.
Most of these platforms offer a set of
benefits that looks like this.
They combine thousands of feeds into single location.
They enable you to receive alerts in real times.
They can normalize feed data,
they remove duplicates,
enable user set rules, etc.
They can be integrated with
some solution or firewalls, etc.
They can create reports and some
of the platforms can also include a feature of sandbox.
Here is an example,
anomaly threat stream platform.
Now when it comes to advantages and
disadvantages of these platforms,
let's start with advantages.
These platforms offer indicators
with context and actionable indicators.
They are useful for enrichment.
They can aggregate multiple feeds
and sometimes even finished
intelligence or narrative based reports
and they can have multiple integrations,
including most known some solutions.
However, these platforms are really expensive,
especially if they include their own premium
feeds collected from closer data sources.
Like we've done for
the other types of private data sources,
here I choose some examples like Insights,
Recorded Future, EclecticIQ, ThreatQuotient,
Soltra from MC4, Anomali threads stream, and TruSTAR.
These as always, are not the only providers
within the marketplace and
these are not the best solutions.
These are platforms that I am familiar with.
This is why I choose to mention these examples.
That's all for this lesson.
Overall, private threat sources are
important investment for
any organization's security posture.
In this video, we've seen the difference
between the three types of private data sources.
As a finished intelligence,
the threat intelligence feeds,
and the threat intelligence platforms.
We've also discussed
their advantages and their disadvantages.
We've also mentioned some example
of vendors available on the marketplace.
Now it's up to you to discover
what's the best option for your organization.
This doesn't mean that you have to choose
now the most appropriate solution for your use case,
because we've only seen one type
of external data collection sources.
I highly recommend watching the next video
about the second type of external data sources,
which is community sources.
Because I believe it might be in
some cases more suitable for your organization.
I will see you there.