Raphaël has been passionate about technology and especially computers for as long as he can remember. He started his career as a service provider for small- and medium-sized enterprises, but quickly moved on to work for one of Europe’s largest banks, where he specialized in incident response. Later on, he built and managed the CSIRT of that same bank, which allowed him to gain valuable experience in security monitoring, incident response, digital forensics, threat hunting and threat intelligence. Meanwhile, his love for offensive security helped him to stay in touch with the mindset, tools & techniques of the attackers. Nowadays, Raphaël is the CSIRT & Pentesting Team Leader at Cegeka, where he combines his passion and experience to help protect the MSSP’s diverse customer base from cyber threats.

Leveraging threat intelligence in the selection and prioritization of detection sources

Cybersecurity professionals usually know which detection sources are required to cover most of the threats that an organization could face. In reality, there are several reasons why not all of these can be onboarded within a reasonable timeframe, or even at all: limited budget, slow and/or complex change management, concerns around manageability etc. Therefore it is important to prioritize the right detection sources when making this selection. During his talk, Raphaël will present an approach to address this challenge using MITRE ATT&CK and other threat intelligence sources.