3.4 Storage and Integration

00:00

Hello and welcome to this third lesson integration and storage. An important part off data processing. In this lesson, we will discover together how crucial is storing and integration off indicators in cyber threat intelligence context.

00:16

After collecting data from multiple sources, this data goes through multiple steps. Off processing

00:24

and output information should be conservative to be consumed in the future. This process it data could also be integrated with security products that are used within the company.

00:36

Keep in mind that most of the threat intelligence platforms, although all processing stages by the same software.

00:44

But you can create your own tools to integrate your output information into your security tools.

00:51

Now let's see how important is storing off indicators the final stage of data processing East storage. After all of the data is processed, it is then start for future use, including temporal analyzes and campaign analysis.

01:08

Why is some information maybe,

01:11

but to use immediately? Much of it will serve a purpose later on. Plus,

01:17

properly stored data is a necessity for compliance with data protection legislations like to DPR. When data is probably start, it can be quickly and easily accessed by members off the organization when needed. When it comes to integration, integration is a key requirement

01:37

for cyber threat intelligence

01:38

because actionable indicators need to find a way back into your security devices and products that are used within your organization.

01:48

And here is a recommendation. Please avoid integrating non created or non vetted feeds into your active security devices because it is going to generate a lot off noise and lot off alerts. For your analysts,

02:02

this video was a quick lesson to introduce the importance off storage of process it data and importance off integration off actionable indicators within your infrastructure.