CTI Blueprints

June 7, 2023

Project Summary

This project developed an approach and prototype tool for creating narrative cyber threat intel reports that analysts need in the form they need them. Reports produced using CTI Blueprints include structured STIX content, are tagged with ATT&CK reference, and enable operational defensive cyber analysis, analytics testing, and adversary emulation. We will establish a new normal for cyber threat intelligence. Producers will create actionable intelligence for their consumers, and consumers will take specific threat-informed action.

Problem

Threat intel producers need clear and concrete guidance and tools to create finished intelligence that meet defenders’ needs.

Solution

Answer defenders’ critical questions through actionable intelligence reports created from expert-developed templates that reflect defenders’ use cases.

Impact

Threat intelligence producers create actionable intelligence that their users can operationalize immediately.

Project Resources:

Project Announcement Project Website GitHub

---

Funding Research Participants

---