Page 79 - Cyber Defense eMagazine July 2024

Internal And External Threat Intelligence

How To Balance the Two Sources

By Vlad Ananin, Technical Writer, ANY.RUN

In cybersecurity, threat intelligence covers a broad range of activities concerning collection, analysis, and
dissemination of information on the current threat landscape. In terms of sourcing, the two primary types
of threat intelligence are internal and external, and finding the right balance between these two can be
key to not only robust but also efficient cybersecurity strategy.

Understanding Internal and External Threat Intelligence

Internal threat intelligence is the data collected from within an organization's own networks and systems.
This can include data on attempted or successful cyber attacks, system vulnerabilities, and anomalous
network activity. Specifically, such data can be pulled from organization’s logs and traffic data for network-
connected devices, security systems like SIEMs, IDS, and antivirus software.

Cyber Defense eMagazine – July 2024 Edition 79
Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.