# Enterprise Threat Intelligence

| **Author**      | **Description**                                                                                                                                                                                                                                                                                                                                    | **Resource URL**                                                                 |
| --------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------- |
| CREST           | CREST released their CTI Maturity Model Assessment Tool (MMAT) in 2020, a customizable and modular tool for assessing the maturity of a threat intelligence program for free. This tool has three types: Summary, Intermediate, Detailed. In 2022, the tool vanished from CREST's website, but is archived by Curated Intelligence.                | CREST CTI Maturity Model Assessment Tool (MMAT)                                  |
| Recorded Future | Recorded Future periodically updates a handbook detailing their vendor-biased roadmap for building an intelligence-led security program. This is useful for understanding what threat intelligence capabilities may need to be integrated with an enterprise CTI program.                                                                          | The Intelligence Handbook: Fourth Edition                                        |
| Recorded Future | Recorded Future maintains a handbook detailing their vendor-biased playbooks for responding to typical CTI-type detections within an enterprise CTI program. This is useful for understanding what threat intelligence response cases may look like in an enterprise CTI program.                                                                  | The Intelligence Playbook: Practical Applications Across the Enterprise          |
| Mandiant        | The core skills framework provides enterprises and individuals guidance with three things: 1. determine appropriate development roadmaps to ensure CTI skills progression; 2. provide a guidepost for aspirant CTI analysts to tailor their studies; 3. assist network defenders in understanding the roles and responsibilities of a CTI analyst. | The Mandiant Cyber Threat Intelligence (CTI) Analyst Core Competencies Framework |
| CERTBI          | This whitepaper details an enterprise-friendly service architecture for offering an enhanced CTI capability.                                                                                                                                                                                                                                       | A service architecture for an enhanced CTI capability                            |