The SANS Institute recently released its annual CTI research report, SANS CTI Survey 2024: Managing the Evolving Threat Landscape. The report delves into several important topics related to cyber threat intelligence (CTI), including:
Geopolitical and regulation landscapes are critical in a CTI team’s tasks
Threat hunting is now the top use case for CTI
AI is making its mark on CTI, with nearly one-quarter of respondents leveraging AI in their CTI program
Another interesting data point resulting from the survey is the rise of CTI reports as the top method for disseminating important information across the organization. According to the report:“Although traditionally emails, spreadsheets, and presentations were the most preferred options to disseminate CTI, reporting emerged as the most prevalent method this year. Survey results show a rise in the use of reporting for dissemination, growing from 62% in 2022 to 74% in 2024. Similarly, the utilization of briefings to disseminate intelligence increased from 51% in 2019 to 64% this year. The uptick in reporting and briefings may reflect the evolving maturity of CTI, because both reports and briefings indicate a receptive audience of decision-makers. This underscores the importance of communication as a core skill for CTI analysts.”
Reporting may be the #1 method for information sharing in the organization, but it’s no simple task and can take a few hours or more to produce just one report. However, Cybersixgill offers a set of tools that takes the pain of reporting away, saving users valuable time so they can focus their efforts on thwarting cyber attacks.
These tools include automated reports on crucial CTI topics such as ransomware group activity, trending malware discussions and industry risk reports, and the custom report creator which allows users to collect information and data points from across the portal into a custom report. The newest and most impressive tool in this reporting arsenal is the Report Generator, a feature allowing users to create complex CTI reports about any topic in minutes
Cybersixgill’s AI-Powered Reporting Enables Efficient Information Sharing
Cybersixgill’s IQ Report Generator , launched in May (and currently in beta), simplifies and streamlines strategic, operational, and tactical threat intelligence reporting, saving security teams significant time and effort in creating reports about cybersecurity events and threat entities. In addition to helping security teams and threat analysts share relevant, critical findings with others in the organization, IQ Report Generator also helps Managed Security Services Providers (MSSPs) rapidly create custom, in-depth reports for multiple clients.
This valuable time-savings feature leverages Cybersixgill IQ, generative AI technology, enabling users to create detailed, custom reports in minutes by entering a topic and setting parameters from dropdown menu options.
In addition to CTI reports, IQ Report Generator can provide insights and recommendations for remediation when threats are detected. The deliverables IQ Report Generator can produce include:
Risk-assessment reports – assessing overall cybersecurity risk, potential impact, and mitigation strategiesThreat intelligence briefings – assessing key threat trends, emerging threats, and their potential impact on the organization
Incident response reports – including indicators of compromise, attack timelines, affected systems, and recommended actions
Post-incident reports – summarizing lessons learned, recommendations to improve, and strategies to prevent future incidents
Vendor risk reports – highlighting the risks from third-party vendors and informing decision-making
Underscoring the value that AI brings to reporting, the SANS CTI survey states that while use of AI in CTI is on the rise, one of the areas where it plays a beneficial role is in analysis and report writing. Our IQ Report Generator powers the generation of a wide variety of CTI reports, including incident response reports, risk and compliance reports, executive-level communications reports, and third-party risk reports.
To see IQ Report Generator in action, watch this video walk-through.
To learn more about IQ Report Generator, sign up for a demo of this new feature. Or get in touch with us to discuss how Cybersixgill’s comprehensive solutions can boost your organization’s CTI program.