CTI Blueprints

Project Summary

Published : Jun 7, 2023

This project developed an approach and prototype tool for creating narrative cyber threat intel reports that analysts need in the form they need them. Reports produced using CTI Blueprints include structured STIX content, are tagged with ATT&CK reference, and enable operational defensive cyber analysis, analytics testing, and adversary emulation. We will establish a new normal for cyber threat intelligence. Producers will create actionable intelligence for their consumers, and consumers will take specific threat-informed action. 

Problem

Threat intel producers need clear and concrete guidance and tools to create finished intelligence that meet defenders’ needs. 

SOLUTION

Answer defenders’ critical questions through actionable intelligence reports created from expert-developed templates that reflect defenders’ use cases.

IMPACT

Threat intelligence producers create actionable intelligence that their users can operationalize immediately. 

Funding Research Participants

Share This Project

Stay Informed

Stay informed about new releases of R&D projects and other exciting updates from the Center for Threat-Informed Defense.