Where AI fits in your threat intel process

Step 1 of 2

How does your team do each step today?

Every step starts as "by hand". Review the list and change any answers that do not describe your team.

1. [01]DirectionUse the threat model to understand which actors matter
   Not doneBy handWith tooling
2. [02]CollectionSubscribe to and maintain the source list
   Not doneBy handWith tooling
3. [03]ProcessingMerge duplicate reporting into one record per campaign
   Not doneBy handWith tooling
4. [04]Relevance & correlationCheck: do we run the affected product and version?
   Not doneBy handWith tooling
5. [05]PrioritisationScore exploitability and reachability
   Not doneBy handWith tooling
6. [06]Actioning decisionReview the ranked picture
   Not doneBy handWith tooling
7. [7a]MitigateRaise the change
   Not doneBy handWith tooling
8. [7b]DetectCheck the telemetry exists first
   Not doneBy handWith tooling
9. [7c]HuntForm the hypothesis from the TTPs
   Not doneBy handWith tooling
10. [08]FeedbackRecord what each path produced
    Not doneBy handWith tooling