从直觉到黄金标准：CTI 中的海军系统介绍.pdf

1、From your gut to a gold standard Introducing the Admiralty System in CTIFreddy Murstad,Lead Instructor,Intelligence TradecraftAgenda About Me Problem with Existing CTI and OSINT Why we need the Admiralty Scale Introduction to the Admiralty System Case Study:Ticketmaster Conclusion QnASource:Unknown

2、Lead Instructor and Owner Intelligence Tradecraft Senior Advisor Threat Intelligence NFCERT PhD Student NTNU Background BA in Marketing MA in Counter Terrorism MA in Intelligence&Cyber Intelligence in the Norwegian ArmySource:Jake Clark,TumblrProblem with existing CTI and OSINT The bread and butter

3、of CTI and OSINT Reporting Blogs and Social Media posts A ton of screenshots Dissecting how a malware,dropper,or campaign worked“Hey,look at all the cool things I can do.I am awesome,right?”Source:UnknownProblem with existing CTI and OSINT Theres a huge lack of transparency,argumentation,and logic!J

4、ust.“Trust us!”I need your source&information evaluation so I can assess whether to trust your reporting!I ALSO need it to understand your assessments and claimsSource:Ramon Martinez,FOR578 Cybercrime studentProblem with existing CTI and OSINTDemonstrate to the reader WHAT you are basing your assess

5、ments on MUST be based on your experience,critical thinking,use of SATs,the body of collected data and information,AND your source&information evaluationShow us the trust you put in the sources you used and the data and information the sources provide More importantly,this is how we decide to trust

6、your reporting,or notSource:UnknownWhy we need the Admiralty SystemSource:The Clarion Ledger,Cartoonist Marshall RamseyWhy we need the Admiralty SystemSource:Screenshot,The AtlanticSource:I made thisWhy we need the Admiralty SystemSource:Snowflake websiteWhy we need the Admiralty SystemSource:CloudS