The new SANS 2021 Report: Top Skills Analysts Need to Master analyzes the need for organizations to invest in improving their security operations and identifies the skills analysts must master to support this initiative. Characterizing an analyst as essentially an investigator, the SANS report breaks the investigative process down into two primary areas: Investigative Tasks and Investigative Thinking.
In my previous blog, we explored investigative tasks and discussed how the ThreatQ Platform can help analysts simplify and automate these tasks, including data aggregation from internal and external sources, and normalization and prioritization of this data to determine the right threat intelligence to act on. Here, we’ll focus on investigative thinking. ...read more!
