Threat Intelligence with Sergio Caltagirone

Mar 16, 2022

Dale Peterson's guest on the Unsolicited Response show is Sergio Caltagirone, VP of Threat Intel at Dragos.  

• What is good threat intel?
• How does threat intel "reduce harm by reducing operational meantime to recovery"?
• Should an asset owner care about the various threat actors named by Dragos, Mandiant and others?
• Does it matter if it was Petrovite or Erythracite?
• Why are the top recommendations in Dragos and other threat intel annual reports the typical, same as they always are, recommendations? What is the value if this is the case?
• What does an asset owner need to have in place to make use of threat intel?
• How does threat intel deal with the fact we are very bad at calculating or predicting likelihood?
• Why did you feel the new Journal of Threat Intelligence and Incident Response was needed?

Links:

• Dragos 2021 Year In Review
• Webinar with Sergio on 2021 Year In Review
• Sergio's Threat Intel Class at the Threat Intelligence Academy
• S4x22, April 19-21 in Miami South Beach