SANS 2026年网络威胁情报峰会嘉宾演讲PPT合集（共20套打包）

1、Beyond the Feed:Designing a CTI Program That Matters to the Business Arun WarikooHead of Cyber Threat Intelligence-CIB Americas,BNP ParibasSydney JonesHead of Cyber Threat Management,CLS-GroupAgenda1。

2、If Only We Had the Data:A Tale of Mismatched ExpectationsAlex PintoDirector of Threat Intelligence,Verizon DBIRAbout AlexAbout 45 years oldAbout 25 years in the security industryAbout 13 years focuse。

3、Low Sensitivity1Red Teams with ReceiptsOperationalizing CTI for Real Adversary SimulationsLow SensitivityRalph HittellNigel BostonJoined Grainger 2022Located Jacksonville,FLGym&Martial Arts enthu。

4、Can we forecast our own fate?Can we forecast our own fate?Mapping the future of the CTI industry with SATsMapping the future of the CTI industry with SATsJ o s h D a r b y M a c L e l l a nJ o s h D 。

5、Selena Larson,ProofpointCant Stop,Wont Stop:TA584 Innovates Initial Access2 2025 Proofpoint,IncTA584 is one of the most prominent cybercriminal threat actors tracked by my team.In 2025,the actor demo。

6、From Overwhelm to ImpactA Prioritization FrameworkTRANGERTHREATSSThe Intelligence of Stranger ThingsAnalyze data and past events to assess the likelihood of future eventsIdentify patterns and changes。

7、Hunting North Koreas State-Sponsored“Contagious Interview”Operation:Attacks on Developers via the Software Supply ChainAdversarial tradecraft:How threat actors weaponize open source.Social engineerin。

8、Poison in the Digital WellIntelligence-Driven Defense Against Supply Chain Attacks“If the well is poisoned upstream,every customer drinks downstream.”Shilpi Mittal Attackers compromise something you 。

9、Applied Forecasting Part Deux:3 years of Forecasting in CTIGert-Jan Bruggink&Lincoln Kaffenberger26 January 2026State of Forecasting;Strong on Speculation,Lite on Rigour2Challenges Faced on Our J。

10、 Security Alliance Limited 2026.Not for distribution.Commercial in Confidence.Knowing When to Quit:A Framework for Managing the Deprecation of Threat Actor AliasesJanuary 2026Nicholas VidalSenior Str。

11、Connecting the Dots:Transforming Incident Data into Actionable Campaign IntelligenceSANS Cyber Threat Intelligence Summit&Training 202626Jan 20262Who we areIntroductionScott DurandCyber Threat In。

12、Bling-up Your Intelligence RequirementsEnhancing Your CTI Requirements With the Diamond Model of Intrusion FrameworkSherman Chu The SituationYou just captured fundamental intelligence requirements fr。

13、Principle of Least AI in Threat Intelligence:A Blueprint for Effective GenAI AdoptionJitin ShabaduForrester Security Analyst2 Forrester Research,Inc.All rights reserved.Vendor Approaches to building 。

14、From your gut to a gold standard Introducing the Admiralty System in CTIFreddy Murstad,Lead Instructor,Intelligence TradecraftAgenda About Me Problem with Existing CTI and OSINT Why we need the Admir。

15、Rhadamanthys and the Limits of Private Sector Offensive OperationsSilas Cutler Security Researcher Censys MalShare/OnlyScanssilas p1nk.ioSilas Cutler Intel Collection vs.Effects Organized vs.Opportun。

16、CONFIDENTIALFrom Theory to TradecraftKyla Guru|January 27,Building Detections to Track AI Enabled AdversariesCONFIDENTIALGTG-2002:The Vibe Hacker2Summary:This threat actor leveraged Claudes code exec。

17、1 Acronis 2026Whenever,Wherever Blind Eagle Attacks:The Shadow Vector CaseSantiago PontiroliThreat Intelligence Research Lead3 Acronis 2026The Unusual AttachmentThis campaign used scalable vector gra。

18、Malware Magic:Revealing Intel Leads Without Reverse EngineeringWhoami?Previous experienceWeb app vulnerability assessmentBinary analysis researchAndroid forensicsPrototype dev in Python,C,C+Author of。

19、About UsThreat researcher at Palo Alto Networks,focusing on threat hunting,malware analysis,and tracking nation state APTs.Lior RochbergerPrincipal Threat ResearcherThreat researcher at Palo Alto Net。

20、Operationalizing CTI:From PIRs to Priority TTPsKeith SwaglerOndra Rojk Cascading strategyKeith SwaglerCTI Analyst/Detection Engineer atPreviously:Incident Response at Red HatSOCVulnerability Manageme。