Microsoft Threat Intelligence Podcast

Microsoft Ignite Special Edition

Jan 10, 2024

37:07

On this week's episode of The Microsoft Threat Intelligence Podcast, Sherrod DeGrippo is joined by Jeremy Dallman, Kimberly Ortiz, and Steve Ginty. Sherrod emphasizes the importance of understanding vulnerabilities before they're exploited in the wild and discusses the process of responding to security vulnerabilities, including identifying threat actors and the urgency of patch deployment, especially for vulnerabilities targeted by ransomware groups. The conversation also focuses on Security Copilot, a tool built on Microsoft's extensive threat intelligence, designed to make SOC analysts' work more accessible by providing immediate, relevant information on threats. This episode offers an insider's view on how these professionals track internal incident responses, share crucial intelligence with customers, and continuously evolve their processes to ensure swift, accurate delivery of threat intelligence.

In this episode you’ll learn:

-How collaborating with multiple MS teams enhances intel delivery

-Interaction between Microsoft Defender Threat Intelligence and Security Copilot

-Publishing actor profiles based on internal observations of techniques and procedures

Some questions we ask:

-How will the world of AI affect the role of threat intelligence?

-What are you most excited about when it comes to AI in cybersecurity?

-When do we share intel with customers, and has that process changed over the years?

Resources:

View Kimberly Ortiz on LinkedIn

View Steve Ginty on LinkedIn

View Jeremy Dallman on LinkedIn