diff --git a/README.md b/README.md index 13647d9..fb4862a 100644 --- a/README.md +++ b/README.md @@ -623,6 +623,14 @@ All kinds of reading material about Threat Intelligence. Includes (scientific) r The Guide to Cyber Threat Information Sharing (NIST Special Publication 800-15, draft) assists organizations in establishing computer security incident response capabilities that leverage the collective knowledge, experience, and abilities of their partners by actively sharing threat intelligence and ongoing coordination. The guide provides guidelines for coordinated incident handling, including producing and consuming data, participating in information sharingcommunities, and protecting incident-related data. + + + Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains + + + The intrusion kill chain as presented in this paper provides one with a structured approach to intrusion analysis, indicator extraction and performing defensive actions. + + Microsoft Research Paper