news
July 18, 2024by Shir David

SANS CTI Survey 2024: Reports Rise to the Top for Communicating Critical Information

The SANS Institute recently released its annual CTI research report, SANS CTI Survey 2024: Managing the Evolving Threat Landscape. The report delves into several important topics related to cyber threat intelligence (CTI), including:

  • Geopolitical and regulation landscapes are critical in a CTI team’s tasks

  • Threat hunting is now the top use case for CTI

  • AI is making its mark on CTI, with nearly one-quarter of respondents leveraging AI in their CTI program

Another interesting data point resulting from the survey is the rise of CTI reports as the top method for disseminating important information across the organization. According to the report:“Although traditionally emails, spreadsheets, and presentations were the most preferred options to disseminate CTI, reporting emerged as the most prevalent method this year. Survey results show a rise in the use of reporting for dissemination, growing from 62% in 2022 to 74% in 2024. Similarly, the utilization of briefings to disseminate intelligence increased from 51% in 2019 to 64% this year. The uptick in reporting and briefings may reflect the evolving maturity of CTI, because both reports and briefings indicate a receptive audience of decision-makers. This underscores the importance of communication as a core skill for CTI analysts.” 

SANS Report_How is CTI information utilized or disseminated
Reporting may be the #1 method for information sharing in the organization, but it’s no simple task and can take a few hours or more to produce just one report. However, Cybersixgill offers a set of tools that takes the pain of reporting away, saving users valuable time so they can focus their efforts on thwarting cyber attacks. 

These tools include automated reports on crucial CTI topics such as ransomware group activity, trending malware discussions and industry risk reports, and the custom report creator which allows users to collect information and data points from across the portal into a custom report. The newest and most impressive tool in this reporting arsenal is the Report Generator, a feature allowing users to create complex CTI reports about any topic in minutes

Cybersixgill’s AI-Powered Reporting Enables Efficient Information Sharing

Cybersixgill’s IQ Report Generator , launched in May (and currently in beta), simplifies and streamlines strategic, operational, and tactical threat intelligence reporting, saving security teams significant time and effort in creating reports about cybersecurity events and threat entities. In addition to helping security teams and threat analysts share relevant, critical findings with others in the organization, IQ Report Generator also helps Managed Security Services Providers (MSSPs) rapidly create custom, in-depth reports for multiple clients.

This valuable time-savings feature leverages Cybersixgill IQ, generative AI technology, enabling users to create detailed, custom reports in minutes by entering a topic and setting parameters from dropdown menu options.

In addition to CTI reports, IQ Report Generator can provide insights and recommendations for remediation when threats are detected. The deliverables IQ Report Generator can produce include:

  • Risk-assessment reports – assessing overall cybersecurity risk, potential impact, and mitigation strategiesThreat intelligence briefings – assessing key threat trends, emerging threats, and their potential impact on the organization

  • Incident response reports – including indicators of compromise, attack timelines, affected systems, and recommended actions

  • Post-incident reports – summarizing lessons learned, recommendations to improve, and strategies to prevent future incidents

  • Vendor risk reports – highlighting the risks from third-party vendors and informing decision-making

Underscoring the value that AI brings to reporting, the SANS CTI survey states that while use of AI in CTI is on the rise, one of the areas where it plays a beneficial role is in analysis and report writing. Our IQ Report Generator powers the generation of a wide variety of CTI reports, including incident response reports, risk and compliance reports, executive-level communications reports, and third-party risk reports.

To see IQ Report Generator in action, watch this video walk-through.

To learn more about IQ Report Generator, sign up for a demo of this new feature. Or get in touch with us to discuss how Cybersixgill’s comprehensive solutions can boost your organization’s CTI program.

You may also like

Pulse Blog Visual

August 19, 2024

Personalization in Cyber Threat Intelligence: Cutting Through the Noise

Read more
Analyst looking at multiple monitors

July 11, 2024

Chinese APT40 Hackers Hijack SOHO Routers: Unleashing Cyber Espionage Attacks

Read more
Abstract digital landscape with flowing lines of glowing binary code in blue and orange, representing data streams and modern technology.

July 08, 2024

CVE-204-6387 Poses Risk to Organizations Relying on OpenSSH’s Server (sshd)

Read more