Threat Intel 201: The Intelligence Foundation

Building on Threat Intel 101 (on-demand), this session moves from extracting indicators to operationalizing intelligence across the full lifecycle.

ReversingLabs engineers break down where most threat intelligence programs stall, between collection and action, and how to close that gap.

You’ll learn how to:

• Validate sources and apply confidence scoring
• Corroborate indicators across datasets for stronger verdicts
• Enrich findings with historical sightings, YARA, and threat actor context
• Move from IOC to verdict your SOC can confidently act on

We’ll also cover what separates tactical, operational, and strategic intelligence, and what each level actually demands from the analyst, with enrichment techniques demonstrated in context, not isolation.

Drawn from ReversingLabs’ experience processing billions of files and indicators, these techniques are applicable regardless of your tooling.

This session is for analysts who already know how to extract IOCs and want to turn them into intelligence that drives action.

*Register Now - Attendees will receive an attendance certificate to be used towards CPE credits.