Geopolitical Cyber Espionage: EU CTI Focus

Geopolitical and regulation landscapes are critical in the CTI team’s tasks. Global conflicts often lead to increased cyber espionage, sabotage, and misinformation campaigns that CTI teams may get questions about or need to respond to. Similarly, new regulations may change a CTI team’s requirements or drive the need for new processes. Both areas are covered in detail in the report.

This year’s SANS survey highlights a key use for CTI teams—threat hunting. Threat hunting is a proactive approach for detecting threats that are either unidentified or not yet remediated within an organization’s network. For the first time in the survey’s history, it is the top use case for cyber threat intelligence.