README.md

Intelligence Product Templates

A series of templates for starting a library of intelligence product Templates

Built as a part of Intelligence Driven Incident Response by Scott J Roberts & Rebekah Brown.

Short Form Products

• Event Report
• IOC Report
• Target Package

Long Form Products

• Campaign Report
• Malware Report
• Intelligence Estimate

Automated Consumption Products

Automated consumption products are indicator formats meant for automation or use with tools like Intrusion Detection Systems or Endpoint Telemetry tools. These formats are tool centric. Analysts decide which automated products to use based on company tools.

• OpenIOC
• Snort
• STIX - Generalized Intelligence Products
• Yara

Meta Products

• Request for Information (RFI) Request
• Request for Information (RFI) Response