Category: cyber threat intelligence

Treadstone 71 برنامج الاشتراك في مخابرات الفضاء الإلكتروني التابع

لقد تم تصميم برنامج الاشتراك في مخابرات الفضاء الإلكتروني على الإنترنت والذي مدته 12 شهراً من أجل لإرشاد المؤسسات أثناء بنائها لبرامج مخابرات الفضاء الإلكتروني ومخاطره من خلال محاضرات عبر الإنترنت، وعمليات شرح ونماذج تغطي مجموعة كبيرة من المواضيع. بعد سنوات من تدريس دورات تدريبية مخابراتية وتقديم البرامج الاستخباراتية للعملاء، تقدم Treadstone 71 الآن برنامج يعمل بشكل تلقائي ويعتمد على الاشتراكات، يقوم بإرشاد العملاء خلال عملية تخطيط استراتيجية، وإنشاء للأهداف والغايات، وتقييم النضج، وتطوير إجراءات التشغيل المعيارية، واختيار منصة استخبارات التهديدات، وتخطيط الجمع، وتحليل الاستخبارات، والكتابة التحليلية والتعميم الذي لا يشمل الجميع.

يتضمن البرنامج فيديوهات إرشادية مرتبطة بالمحتوى، مع إمكانية وصول مباشر ودوري إلى Treadstone 71  لمعرفة آراء العميل القابلة للتنفيذ. بعد معرفة الآراء هناك دورة قياسية تتضمن التعليقات والاقتراحات والتوصيات وأمثلة على منتجات تم الانتهاء منها من قبل. تقدم Treadstone 71  أيضاً ساعات عمل دورية ’للمعلم‘ وذلك لاستقبال الأسئلة والرد عليها.

يتبع البرنامج أساليب مثبتة تم تأسيسها عبر سنوات أثناء إنشاء البرامج الاستخباراتية. يتحرك العملاء بمعدل طبيعي يتوافق مع جداولهم الداخلية والتي تساعد Treadstone 71  على تأسيسها مع العميل. بإمكان العميل اختيار مجموعة الاشتراك كاملة، أو اختيار نماذج معينة. يتضمن الاشتراك أيضاً تدريب شهادة مخابرات الفضاء الإلكتروني Tradecraft ويضيف نموذج جديد يساعد العملاء على إنشاء ممارسات محاكاة نظرية.

نظرة عامة لبعض محتوى الاشتراك:

Brochure on the service

0

Seeking Strategic and Tactical Intelligence Analysts – UAE

Treadstone 71 is working with a UAE client seeking Strategic Intelligence Analysts and Tactical Intelligence Analysts #cyber #intelligence #intel

We are not looking for people that are rooted in indicators of compromise and purely IT related issues. We seek true intelligence professionals who fully understand the lifecycle, structured techniques,

collection planning, analysis, and analytic writing. This is on location positions in the UAE. Resume and references required. Should you be selected for an interview, we will require analytic writing samples at a minimum. info AT treadstone71 DOT com

#analyst #analyticwriting #intelligenceanalsys

job descriptions – > Treadstone 71 UAE Positions

0

Treadstone 71 Cyber Intelligence Subscription Program

The Cyber Intelligence 12-Month Online Subscription Program is designed to guide organizations in their cyber and threat intelligence program builds through online lectures, demonstrations, and templates covering a wide range of topics. After years of teaching intelligence courses and delivering intelligence programs to clients, Treadstone 71 now offers the subscription-based, automated program guiding clients through the strategic planning process, goals and objectives creation, maturity assessment, SOP development, threat intelligence platform selection, collection planning, intelligence analysis, analytic writing, and dissemination non-inclusively.

The program includes instructional videos tied to content with periodic direct access to Treadstone 71 for client deliverable reviews. The reviews follow a standard cycle including comments, suggestions, recommendations, and examples of previously finished products. Treadstone71 also offers regular ‘professor’ office hours for Q&A.

The program follows proven methods established over the years while creating intelligence programs. Clients move at a regular pace that corresponds with their internal schedules that Treadstone 71 helps to establish with the client. Clients may choose the entire subscription package or choose modules ala-cart. The subscription also includes the standard Cyber Intelligence Tradecraft Certification training and adds a new module assisting clients with the creation of table-top exercises.

An overview of some of the subscription content follows:

  • Strategic Plan development, acceptance, and dissemination
  • Mission
  • Vision
  • Guiding Principles
  • Roles and Responsibilities
  • Goals and Objectives
  • Roadmap
  • Cyber Intelligence Capability Maturity Model Assessment
  • Standard operating procedures
  •               RACI(S)
  •               Process flow diagrams
  •               Associated metrics
  •               Peer Reviews
  • Intelligence Functions
  • Communications, Responsibilities, Methods
  • Practices and Activities
  • Organizational interfaces
  • SOC and IR
  • Other intelligence groups
  • CISO/CSO and CIO
  • C-Suite
  • Department leadership
  • External groups
  •                            Vendors
  • Cyber Intelligence Lifecycle definition
  • Stakeholder Analysis
  • Collection Planning
  • Production
  • Structured analytic techniques
  • Analysis
  • Analytic Writing
  • Reporting and Briefing
  • Dissemination
  • Intelligence Information Sharing
  •               Enterprise objectives
  •               Communities of Interest
  •               Your internal ISAC
  • Threat Intelligence Platforms
  •               RFP and Selection process
  •               Maturation
  •               Vendor data feeds
  • Training and Knowledge Transfer
  •               Cyber Intelligence Tradecraft Certification
  •                            In-person
  •                            8-week online
  • Treadstone 71 Onsite Assessment and Assistance

Clients subscribing to the program create program content undergoing Treadstone 71 review prior to leadership delivery. The intent is to share our vast expertise in cyber intelligence to assist organizations in the timely building of their programs. Clients may choose to extend their program beyond a year or accelerate their program based upon their acceptance of agreed upon assumptions and requirements. Clients have the ability to speed up or slow down their programs throughout the subscription.

Mixmatch

We see this model as an effective and efficient way to extend our knowledge, share our standards-based program information while setting up an industry model rooted in intelligence community tradecraft. That tradecraft follows the International Association for Intelligence Education Standards for Intelligence Analyst Initial Training, intelligence community directives (ICDs), content from the Sherman Kent School for Intelligence Analysis and Mercyhurst University as well as boots on the ground experience.

What do you have at the end of the program?

As clients carefully follow the training, timelines, and execute to the deliverables internally, clients will have built a complete cyber threat intelligence program. The program definition, strategy, policies, procedures, process flow diagrams, roles, responsibilities, templates, models, methods, tactics, techniques, reports, dissemination models, briefings, table-top exercises, as well as certified Cyber Intelligence Tradecraft professionals are all core components of the what clients achieve.

Our pricing model will be a fixed price for the core modules with add-on modules priced separately. Treadstone 71 onsite work options will be clear and defined with the ability of clients to purchase onsite and online ‘office hours’ over and above hours provided in the core modules. Clients will have the choice of selecting from several options.

For more information about this new program, contact Treadstone 71 at 888.714.0071 or info@treadstone71.com. We will respond to all inquiries as long as they are from corporate and business accounts.

Copyright 2018 Treadstone 71 LLC

0

Gerasimov Doctrine in Full Swing against the US

The Gerasimov Doctrine is in use in the United States and will come to another crescendo in the near future as our 2018 elections come to bear. Learn how to identify some of the methods when they occur.  #education #cyber #training #intelligence #intel #analysis#collection #elections #analysts #doctrine #intelligencecollection#intelligenceanalysis #gerasimov #putin #russia #olgino

How to help identify propaganda coming from any source. Gerasimov Doctrine in action in the United States.

Where does the speaker or group get their funding? What is their background?

Who are their main supporters?

Does the content have a strong emotional aspect?

Do they provide or describe ominous, stirring, or patriotic images or music?

Do they associate a group, person, event, or idea with something hated or feared?

Do they use slogans of any type that have been heard before and repeated?

Do they use virtue words (e.g. peace, happiness, security, wise leadership, freedom, liberty)?

Is their reasoning poor?

·      Illogical or non-intuitive relationships between concepts

·      Sweeping conclusions from mere anecdotal evidence

·      Issues framed to favor one point of view while deflecting and pivoting

·      Irrelevant or questionable data

·      Vague, undefined terms and concepts

Do you see evidence of false or missing information (telling only half of the story)?

Is there oversimplification?

·      Simple answers to complex social and political questions

·      Blame assigned to an individual or group (scapegoating) without evidence

·      Misleading stereotypes or labels

·      Blanket statements

Is the aim of the article to persuade?

·      Cites or associates prominent figures to a position, idea, argument, or action

·      Repeats ideas until they are accepted as truth

·      Presents ideas as the view of the majority (so get on the bandwagon – wake up)

·      Implies that opposition (to the author’s premise) would be unpatriotic, undemocratic, or inhumane

Does it align information that is not objective and is used primarily to influence an audience and further an agenda? Are facts presented selectively to encourage a particular synthesis or perception or using loaded language to produce an emotional rather than a rational response to the information that is presented. Are the contents associated with material prepared by adversarial governments while ignoring the issues associated with those they support?

Influence operations are focused on affecting the feelings and behaviors of leaders, groups, or entire populations. Influence operations employ capabilities to affect behaviors, protect programs that support their intent, and project false information interspersed with some accurate data to achieve desired effects across the cognitive domain. Influence operations are the coordinated, integrated, and synchronized application of national diplomatic, informational, military, economic, and other capabilities in peacetime, crisis, conflict, and post-conflict to foster attitudes, behaviors, or decisions by US citizens driven by foreign entities bent on creating chaos.

Biases are systematic errors in judgment that human beings consistently make, and our adversaries continue to use against the US populace. Here are 10 that help explain why we will never stop falling for their propaganda and methods to ensure chaos in our society:

1.     Bias blind spot — the tendency not to compensate for one’s own cognitive biases. (This is why nobody thinks they’re biased)

2.     Third-person effect- Belief that mass communicated media messages have a greater effect on others than on themselves. (This is why propaganda is so effective. It does not affect me!)

3.     Authority bias — The tendency to attribute greater accuracy to the opinion of an authority figure (unrelated to its content) and be more influenced by that opinion. (This is why some of Trump’s supporters believe everything he says no matter what)

4.     Declinism – The belief that a society or institution is tending towards decline. Particularly, it is the predisposition to view the past favorably and future negatively. (This is why ‘Make America Great Again’ was such an effective message)

5.     Confirmation bias — the tendency to search for or interpret information in a way that confirms one’s preconceptions. (This is why people click on fake news they want to be true)

6.     Bandwagon effect — The tendency to believe things because many other people believe the same. (This is why people believe fake news shared by their friends)

7.     Availability cascade — A self-reinforcing process in which a collective belief gains more and more plausibility through its increasing repetition in public discourse. (This is why fake news become true the more it is shared)

8.     Continued influence effect — The tendency to believe previously learned misinformation even after it has been corrected. (This is why Hillary’s ‘formal accusation’ had such a big effect even after Comey dropped charges)

9.     Hostile media effect — the tendency to perceive news coverage as biased against your position on an issue. (This is why millions of voters don’t trust the mainstream media)

10. Backfire effect — The urge to do the opposite of what someone wants you to do out of a need to resist a perceived attempt to constrain your freedom of choice. (This is why the media ganging up on Trump completely backfired)

What to learn more?

www.planetreg.com/T71IntelTraining

www.cyberinteltrainingcenter.com

www.treadstone71.com

0

Iran to cyber-attack the US?

Most all organizations knee-jerk responses to the sanctions as an immediate for Iranian cyber attacks against the US. This is not unusual for such organizations as it helps sell product and is solely based on a limited understanding of the area and a focus on so-called ‘threat intelligence.” A much larger geopolitical view is required. This is a standard response and not one based on evidence or fact but emotional responses to a US-initiated action. Iran has been targeting the United States since approximately 2002 with the formalization of certain digital security and hacking groups in Iran. Any Iranian attacks against the US would lead to exponentially more lethal attacks against Iranian targets by the US. Iran will most likely focus its efforts on suppressing any internal dissent, squashing any visible means of internal turmoil while censoring the ability of Iranian citizens to openly express their contrary viewpoints via the Internet. Treadstone 71 does not believe any attacks on US soil i.e., against critical infrastructures in the US would be productive for Iran at this time. We may see continued probes, scans, and methods of enumeration against these sites but direct attacks are not likely unless it is retaliatory (based upon other than sanction actions by the US). We may see increased cyber actions against US military capabilities in the Persian Gulf as methods of testing relative to war games in and around the Straits of Hormuz. With economic unrest and visibly upset people in Iran, Iran has more internal troubles and will likely focus their efforts there. We do not believe we will see any immediate, state-sponsored attacks against the US from Iran as a result of the sanctions at this time. This could shift and increased vigilance is still warranted.

Our Previous statement from May still holds

With more control over Iranian hackers now as opposed to the past, Rouhani may exhibit restraint thereby not playing into US hawk ‘I told you so’ pundits. Any hacks of substance coming from Iran at this time would be directed by the government but it is unlikely we will see an immediate uptick in activity based upon the already expected response from the current US Administration. Rouhani still has the ability to work China, Russia, and the EU over the existing agreement. If anything, this places the US further on the outside of global activities creating another vacuum where we once stood. Any Iranian overt and targeted hacking at this time against the US would be counterproductive to their aims.

Further to, it is possible that Rouhani detractors inside Iran could execute targeted attacks against the US as a method to discredit his administration while supporting the view from US hawks. Hardliners in Iran are not satisfied with the agreement and may do more beyond hacking to discredit Rouhani with remaining agreement members.

Additionally, adversaries of Iran could execute cyber false flag operations to make attacks look as if they originated from Iran in order to discredit the Iranian leadership as a pretext for increased sanctions and cyber actions.

Regardless, we should expect increases in reconnaissance, phishing, and social engineering actions in preparation for much larger actions. Monitoring of this activity, the locations from which they occur as well as any changes in adversary and payload speed, targeting, and maliciousness, should be increased in standard surveillance and warning actions. An increase in the ‘cyber defcon’ at least for vigilance is warranted.

0

Singapore – Cyber Intelligence Training

Cyber Intel – Brochure and Signup

Cheque: make payable to :
MaitreAllianz PteLtd
Mail to: 3 Queen’s Road, #10-163, Singapore 260003
Bank Transfer: MaitreAllianz PteLtd
United Overseas Bank Limited,
RochorRoad Branch
Account No: 147-3020-918
Swift Code: UOVBSGSG

Payment must be made in Singapore Dollars.
Payment is required within 5 working days on receipt of invoice.
Bookings received less than 14 working days –cash payment only
SUBSTITUTION, CANCELLATION, NO-SHOW, POSTPONEMENT POLICIES, CONTACT DETAILS, and EVENT CONFIRMATION
SUBSTITUTION is allowed up to 7 days before day of event. AdminCharge of S30.00 is required for substitution request received with less than 7 days advance notice.
CANCELLATION must be made in writing. Refunds are computed based on the date of receiving your notice.
Full Refund –28 days or more prior to the event
75% -21 to 27 days notice
50% -20 to 14 days notice
25% -7 to 13 days notice
NO REFUND or credit for 6 days or less notice
NO SHOW, Sick Leave, Urgent BusinessCallor Absent for any reason-the full course fee is due.
If we CANCEL or POSTPONE the event, full refund will be given.
FORCE MAJEURE CLAUSE: We shall assume no liability whatsoever if this event is altered, rescheduled, postponed or canceled due to a fortuitous event, unforeseen occurrence, or any other event that renders performance of this event inadvisable, illegal, impractical or impossible. For purpose of this clause, a fortuitous event shall include but not limited to: an Acts of God; governmental restrictions and / or regulations; war or apparent act of war; terrorism or apparent act of terrorism; disaster; civil disorder, disturbance and / or riots; curtailment, suspension, and/or restriction on transport facilities / means of transportation; any other emergency.
YOUR DETAILS: All details required for registration are mandatory. If you found errors, kindly notify us.
SPEAKER CHANGES: Speakers and topics were confirmed at the time of publishing, however, circumstances beyond the control of the organizers may necessitate substitution, alterations or cancellation of the speakers and/or topics. As such, we reserve the right to alter or modify the advertised speakers and/or topics if necessary. Any substitution or alteration will be reflected on our web page as soon as possible. All delegates or their representative will also be notified as soon as the changes are made.
Tel: 6100 0621
http://www.maitreallianz.com

Course Brochure and Signup

0

Deception, Distortion, Dishonesty: The Real Story Behind the Hype – RSA Conference 2018 – San Francisco

Dr. Khatuna Mshvidobadze

In the summer of 2008, Russia attacked Georgia in the first-ever combined kinetic and cyberwar. Sure, the 1990-1991 Gulf War was dubbed the first information war—the use 226571794ecbc84a4232f3e9a42a7041-480x270of information in war is not new. What was new in 2008 was that Russia employed its cyber arm as an independent operational capability alongside its land, sea and air forces. The targets were critical infrastructure. The strategic objectives were to sap Georgia’s will to resist and to provide cover for Russia’s information campaign to deceive the west into believing that somehow little Georgia was the aggressor.

Operational security was paramount—Moscow had to keep everyone confounded about who was behind the cyber attacks. Just like the kinetic invasion, the cyber attacks were long and well-planned, but Russia did a great job covering its tracks. When the shooting stopped, well-meaning researchers investigated what had happened. However, coming from a profession that focuses on computer screens and a culture unaccustomed to the 2018-04-11_9-18-09kind of deception that is part of everyday Russian life, they foundered.

The attacks led us to Russia. We noted uncanny timing. Western experts were indeed confounded when the trail led to kids and criminals. I have been following that trail ever since. Insight into Russia, all-source intelligence and a keen understanding of denial and deception were needed.

Today, saying that the Russian state employs a network of cybercriminals to do its online dirty work is commonplace. One might just as well pretend not to know the identity of those little green men who seized Crimea. But when I started saying it in 2010, you would not believe the resistance I encountered.

Soon after, I met Jeff Bardin, my professor at Utica College, who became mentor and friend. Jeff brings an extraordinary expertise in all-source intelligence and the ways of denial and deception. At this year’s RSA Conference, it is my privilege to combine with him in a talk entitled Deception, Distortion, Dishonesty: The Real Story Behind the Hype.

Jeff will lead off, analyzing the types of D&D, its various dimensions and some tactics that can be employed online and offline. The planners, he will say, must have clear reasons for utilizing D&D based on their goals. They must define the strategic, operational and tactical goals of deception and the criteria for success.

I will point out that Russians do not see cyber warfare as distinct but regard it as just one tool of information war. Look at 2008. The cyber attacks aimed at hampering the Georgian government’s ability to communicate while Moscow’s propaganda machine painted Russia as the aggrieved party. “Information space opens wide asymmetrical possibilities for reducing the fighting potential of an enemy,” writes Valery Vasilyevich Gerasimov, Chief of the Russian General Staff. It’s a remarkable statement, but nothing new—Russian thinking on information warfare has been consistent since the 1980s.

Now, the Kremlin commands a vast network of online intelligence agencies, scientific organizations, academic institutions, criminals, and trolls. We’ll discuss how Russia deals with enemies, foreign and domestic, cyber players and organization, the growing role of the military, tactics, techniques, procedures and tools, vectors, false flags, troll factories and more. Come join us on Wednesday at the RSA Conference.

KM

0

Coincidences Take A Lot of Planning – RSA Conference 2018 – San Francisco

The RSA Conference is soon upon us! The expectation to see old friends and make new rsa1800008-buckle-up_augacquaintances. The show will once again be great with new technologies displayed, new ideas bantered about, and phrases around AI used inappropriately and about 5-10 years too soon. The parties will crank at night and many will suffer the cocktail flu come the next morning. 40,000 strong is the estimated number for this event! Huge!

کنفرانس RSA 2018  rsa-конференция 2018  2018 RSA 회의  rsa 2018年会议  مؤتمر rsa 2018

But what of the undercurrent that occurs unmentioned every year? Just beneath the surface are a series of activities generated by scores of foreign agents looking to steal information, intellectual property, or gain an upper hand over someone of importance being caught doing illicit things. How many spies will blanket the city and the shop floor armed with various technologies used to extract information? Cyber and physical espionage activities run amuck at such events. This is common and expected. How will you know when your data is being pilfered? Will your hotel room be secure? Are your 2018-04-05_14-43-31mobile devices secure? What data have you given up already? Flight plans, hotel information, email addresses, phone numbers, social media data, car rental information, events you will attend, arrival and departure times, restaurant reservations, meeting information… Do you think your data is not in the wind already? Will a chance encounter lead to unexpected information sharing? Is the person next to you at the bar there just by coincidence?

All questions you should consider. All questions that are usually forgotten or ignored.

BEHIND ALL COINCIDENCES THERE IS A PLAN, AND BEHIND ALL PLANS THERE IS A COINCIDENCE – Malnar

I12149464887

0

Africa – Where Counter-Terrorism and Modernization Meet

One more fascinating/outstanding effort by the new Kansas State Dragon Team. This time we researched the major powers’ use of Drones on bicoastal AOs in Africa. Many interesting conclusions and lots of resources involved. The false flag is counter-terrorism. The real agenda is resources: gold, diamonds, cotton. China continues it “Take and Talk strategy” in Africa and the Spratly Islands back in its home territory of the South China Seas.

We next intend to look at China’s interference with India and Pakistan. The next war will be by Drone proxy – as predicted. Too much UAS  investment by so many big players to leave them dormant.   Or it might be very subtle like disruption of GPS communications or replay of navigation bridge signals on US  naval assets.

REPORT in PDF HERE

  • Team Dragon
  • Kansas State University

ksu

0

Blog at WordPress.com.

Up ↑

%d bloggers like this: