>> Hello, and welcome to the third lesson
>> from the module, dissemination and feedback.
>> In this lesson,
>> we will focus on the operational intelligence.
>> This lesson is dedicated
>> to fully understand operational and diligence
>> and it's different aspects.
>> We will start with an understanding
of what is operational intelligence?
We will see the operational decisions,
and some of the benefits offered
>> by operational intelligence,
>> and we will finish with a quick overview
>> on the appropriate audience
>> of operational cyber intelligence.
Operational intelligence is real-time
or near real-time intelligence,
often derived from technical means
>> and deliver it to ground troops
>> engaged in activity against the adversary.
>> Operational cyber intelligence is data
that can inform day-to-day decision-making,
resource allocation, and dusk prioritization.
It includes trends analysis,
showing the technical direction of threat actors,
indications that an adversary
>> has selected a particular target
>> and revelation of malicious tactics,
>> techniques, and procedures.
It can also be useful in
identifying threats against your network.
Examples of operational cyber intelligence includes
information feeds from an information sharing
and analysis center, or ISAC, and alerts
from the Department of Homeland Security,
DHS, about a new threat trend.
Operational decisions made by security professionals,
IT teams and even executive are better informed
>> with a knowledge of
>> which tools adversaries are using,
which vulnerabilities are they exploiting
>> and what techniques all other defenders are
>> using to successfully mitigate this threat.
This will enable decision-makers
>> to better prioritize daily work schedules,
>> build security teams and collaborate
with outside the parliaments and business leaders.
Other operational decisions include
the policies you put into your IT system
>> to automatically respond to tactical threats.
>> When it comes to operational intelligence,
analyst can build a solid picture
of actor methodology by pressing
together tactical indicators and artifacts
>> and derive it into operational intelligence.
>> This can help to enrich security events
and alerts for known-bad atomic IOCs,
equipping security personnel with the context
>> that they need to make better security decisions.
>> It can also help enhance incident response plans
and mitigation techniques
>> for future attacks and incidents.
>> It can help as well to implement
>> and bolster a proactive discovery program,
>> or threat hunting program
>> to identify suspicious files
>> and activity that has by-pass
>> a traditional security technologies.
>> It can help also to extract
useful redteaming techniques
>> based on attacker's methods in the world.
>> It can also help to perform actor-based
>> or malware family-based analytics
>> for high-risk threats to company,
industry, geography or nation.
Finally, it can also help to develop
detection methodologies
>> that are not dependent on IOC's,
>> ensuring a broader coverage
of threats in a more timely fashion.
Let's see the audience
>> of operational cyber intelligence.
>> Operations cyber threats intelligence is intended
for an almost exclusively technical audience.
For example, we can find
security operations personnel and managers.
It unavoidably includes technical contexts.
In many ways drew
operational threat intelligence is
the holy grail of security.
Providing defenders with an opportunity
>> to put controls in place
>> and block attacks before they occur.
>> Operational threat intelligence provides
a greater level of contexts
>> than tactical threat intelligence.
>> The main goal of operational cyber intelligence
>> is to understand threat actors
>> and their modus operandi.
>> It helps security teams investigate
the capabilities intent and methods
>> or TCP's provides inputs to a network architects,
>> system administrators, etc.
>> This is what we discovered during this video,
starting from the first part of
the finding operational cyber intelligence.
Then seeing the operational decisions
and then benefits of operational intelligence
>> to the audience of this type of intelligence.
>> This is all for this video.
I hope you enjoyed this lesson.
The next lesson will be about strategic intelligence
and it will be our last video of this module.