>> After seeing all of these
open threat feeds or public threat feeds examples,
now it's time to move to the 3rd type
of public threat intelligence sources,
which is threat intelligence platforms
or public threat intelligence platforms.
These platforms can organize one or
more feeds into single stream of threat intelligence.
These can be used for enrichment and
there are multiple examples available on the Internet.
For example, there are
STAXX platform offered by Anomali, MISP.
There's also CRITS,
another platform called OTX or Open Threat Exchange
offered by Alien labs.
There is OpenCTI,
and there is safe collective intelligence framework
offered by CSIRT Gadget.
We are going to see these platforms in
more details in their dedicated lesson.
Let's quickly summarize this lesson.
We've seen how beneficial
is public threat intelligence source,
and what problems or issues you should be aware
of when you are using
this particular type of external threat intelligence.
We've seen multiple examples of
public threat intelligence, finished reports sources,
and examples of websites
>> offering free and public threat
>> feeds and we finished with examples
of free threat intelligence platforms.
Of course, you are not limited to
these examples that I've mentioned in the slides,
and you can build your own list of feeds
based on what kind of
intelligence you are more focused on.
That was all for this lesson.
I hope you watched all of the videos
concerning the different types
of external data collection sources.
I believe now you are ready to make
an appropriate choice based on
what kind of intelligence you really need.
Keep in mind that you can combine different sources
altogether or get an all-in-one solution.
For instance, and based on my personal experience,
multiple vendors and blogs and
security researchers offer good quality
of finished reports that can
be used by your internal teams to keep themselves up to
date when it comes to trending
threats and daily readings.
For threat intelligence platforms,
some platforms are really worth the investment,
especially if you have a small team that
cannot keep your on-prem platform well maintained.
That's all as a recommendation from my site,
I hope you like the video.
In the next lesson,
we will see how we can leverage another source of
collection called OSINT for threat intelligence.