Sharing threat intelligence improves collective defense.
Types of Sharing Groups
- ISACs: Sector-specific (FS-ISAC, Health-ISAC)
- ISAOs: Cross-sector
- CERTs: National/Regional
- Private sharing groupsWhat is Shared
- Indicators of Compromise (IOCs)
- Tactics, Techniques, Procedures (TTPs)
- Vulnerability information
- Incident reports
- Best practicesStandards
- STIX: Structured threat info
- TAXII: Sharing protocol
- MISP: Threat sharing platform