Anomali Match: An Operational Model for Breach Analytics and Intelligence
There are a myriad of methodologies and models for managing threats and threat hunting by threat analysts. Culture wars inside organizations over which model provides the right approach for the security organization and provide business value create friction amongst security team members. We also see an ever growing number of data breaches that indicate the need for a shift to a single unifying methodology and model that incorporates the elements of all to slow the growing number data breaches.
This white paper describes the Anomali Match model which focuses on prioritization and relevance for both security operations and threat analysts.