🌟 CyBlack May 2024 Cohort Internship Update 🌟
Today officially marks the end of Sprint 1, focused on Threat Intelligence. Over the past two weeks, interns were grouped into teams to enhance collaboration and information sharing. As anticipated, the CyBlack internship provides real-world scenarios that cybersecurity analysts commonly face in the corporate environment.
Sprint 1 Overview: Threat Intelligence
Threat intelligence involves gathering, analyzing, and sharing information about potential cyber threats to an organization's digital assets. This includes:
✳ Indicators of Compromise (IOCs): Signs of malicious activity, such as IP addresses, domains, or malware samples.
✳ Threat Actor Tactics, Techniques, and Procedures (TTPs): Methods used by threat actors, including exploit techniques or malware.
✳ Vulnerability Intelligence: Information about software or hardware vulnerabilities, including patch availability and exploit likelihood.
My team focused on a financial organization, performing passive reconnaissance and making relevant findings. My tasks included researching tools for passive information gathering, such as TheHarvester, Censys, and Maltego. Using Maltego, I conducted an information-gathering exercise on our organization and discovered sensitive documents and data that were inadvertently shared or left publicly accessible . I also drafted a risk assessment report based on the identified threats and vulnerabilities, which was utilized in risk management.
✅ Key Learnings:
✳ Mastered passive reconnaissance using Maltego.
✳ Analyzed threat actors' tactics and techniques using the Mitre Attack framework.
✳ Identified potential vulnerabilities and gathered intelligence for defense strengthening.
✳ Learned to present findings for both technical and non-technical audiences.
✳ Created a risk assessment report based on gathered intel.
Overall, this sprint enhanced my knowledge in cybersecurity research, threat intelligence, and profiling.
Special thanks to CyBlack for this opportunity and Onyekachi Anyalechi for facilitating this sprint, moderating our presentation, and providing valuable feedback. Thank you, Dr Iretioluwa Akerele; your support means a lot to me. A big thank you to my amazing team for your invaluable contributions to this endeavor. 🙏🏽
This sprint was an incredible learning experience, and I'm excited for the next sprint! 💯 "
#CyBlackIntern #ThreatIntelligence #Cybersecurity #LearningExperience
Way to go, Lucky! Super excited to see you making the most of every "at bat." ⚾ Thanks for being part of the Palo Alto Networks team this summer!