Post #1421944

That is obviously one of many "atomic" tasks to perform. Another is to simply extract and classify threat actors according to STIX naming conventions of actor_type. All of this is trivial, but very time consuming. But having all the data appropriately tagged and indexed makes for some very real and tangible benefits when going down an analytical rabbit hole. It speeds up the process significantly without sacrificing quality. Each classification comes with a justification and "evidence" so that as an analyst it's real easy for me to quickly understand if I agree with (or not) the assessment/classification. Productivity boost for sure. Anyways. I'm all hyped up about this and the possibilities it creates for me.