From data to decisions: Threat intelligence in SOC operations

Damir Shaykhelislamov, Advanced Threat Protection Solutions Group Manager, Kaspersky , outlines the key relationship between threat intelligence and a security operations centre in this exclusive feature. Effective analysis starts with the essential questions “who, what, when, where, why and how” – that convert data into intelligence. In many ways, these same pillars define the discipline of Threat Intelligence (TI).