SANS Product Review: Enhancing SecOps with Google Threat Intelligence
SANS reviewed the Google Threat Intelligence platform, which offers a comprehensive set of options for investigators, threat intelligence analysts, and investigators who need to keep up with up-to-the-minute threat actors and their tactics. This paper reveals their findings from their comprehensive review. The review finds that this solution offers not only breadth and depth of actionable intelligence via IoCs and TTPs, but also significant ease-of-use and numerous integration opportunities with the other key components of a SOC toolkit. Google Threat Intel is a platform that could easily serve as a daily go-to for threat hunting, forensics, malware analysis, and incident detection and response—and with Mandiant and VirusTotal resources available, it’s hard to imagine a larger range of visibility into the most current threats and campaigns targeting organizations today.
