Everyone go home, Recorded Future figured it out.

https://www.recordedfuture.com/blog/how-to-prevent-ransomware

@cR0w So now it's proactive threat intelligence. They had a run at ELITE Threat Intelligence as well.

What's next?

@cR0w Lmaooo

At its core, modern, proactive threat intelligence is about getting ahead of attacks before they materialize. By leveraging advanced analytics, AI, and ML, proactive threat intelligence works to forecast emerging threats and adversary behavior.

Okay you just invented Cyber Precrime .

Also, is it just me or is "best of breed" a creepy-as-hell term?

@nopatience They're not the only ones riding that idea either. It's so gross because it's based on vibes. I don't mean to fangirl out or anything, but at least the predictive stuff @greynoise is doing is based on observations and trends, not vibes.

@cR0w @greynoise

100%. Until they get data-driven like GreyNoise and provide some sort of tangible evidence of their alleged predictiveness I shall remain behind the fence, hiding in the basement in my panic room from where I can watch the tides of internet noise hit my network edge devices.

@mttaggart Best in breed doesn't bother me because I always think of it like a dog show, which fits the dog and pony shows these vendors are so proficient in. It could definitely have other connotations but I never picked up on them.

I'm with you on the precrime part, and it really does appear their predictions are based on vibes, the idea of developing intel before an attack, or even potentially before the infra is completed, is a valid concept when done reasonably. Like the GreyNoise predictive attack alerting based on patterns and observation, and providing the necessary caveats. RF's approach of forecasting behavior falls right into the desires and RFPs of authoritarians, who have deep pockets for this stuff.

@cR0w My business appropriate response -

What a tired and over hyped slide deck of marketing materials. Stopping Ransomware and adversarial behaviors is nuanced, complex, and requires a degree of creativity that AI has yet to breach.

My non-business appropriate response involves a lot of the same language, just more profanity and excitement.

@mttaggart @cR0w Business idea:
1) Get some VC money for AI
2) Spend 10% on your salary, so you are set for life
3) Spend 89.9% of it on marketing
4) Spend 0.1% on a script that "predicts" you'll get phished, remote access boxed will be popped, etc. and advice to implement the usual boring remediations ("patch your shit", "MFA", ...) . Now that The AI predicted it, maybe they'll be implemented too!

Win-win!

@cR0w @mttaggart BRB… adding a "predictive thrunting" chapter then having Claude put the finishing touches on the "Vibe Thrunting" book…

@hrbrmstr @mttaggart I hate to be the one to tell you this boB, but I'm pretty sure vibe thrunting is something completely different. 🫦

@creativegamingname Even with the profanity I'm sure it's still more professional than my response. 😆

@buherator @mttaggart Oh shit you figured out GAYINT's business plan.

@cR0w What can I say, I'm a classy guy. 😆

I have time... I have inclination... how do I make them stop?! 😢

@cR0w @buherator Let's think names. Something mystical, implies knowledge of the future. Oh! I got it! Oracle!

Wait

@mttaggart

The Oracle of Hairpie

@cR0w @buherator

@mttaggart @cR0w 💯

Also, is it just me or is "best of breed" a creepy-as-hell term?

@cR0w @mttaggart

@cR0w I really need to find the hours in the day to do the “I read all the industry reports so you dont have to” talk I want to do.

And the conclusions will likely be:
MFA all the things
Stomp out infostealers
Inventory
Patch
Reduce attack surface
3-2-1 backup rule

That’s it!

@TindrasGrove Or, apparently, you can just purchase #VIBINT. That seems easier.

@cR0w I mean, I *could* just shove them all into my corporate GPT but where’s the fun in that?

@TindrasGrove It would be interesting to see what it spit out.

@cR0w would definitely be an interesting experiment for my copious free time.