Enterprise Threat Intelligence

Author	Description	Resource URL
CREST	CREST released their CTI Maturity Model Assessment Tool (MMAT) in 2020, a customizable and modular tool for assessing the maturity of a threat intelligence program for free. This tool has three types: Summary, Intermediate, Detailed. In 2022, the tool vanished from CREST's website, but is archived by Curated Intelligence	CREST CTI Maturity Model Assessment Tool (MMAT)
Recorded Future	Recorded Future periodically updates a handbook detailing their vendor-biased roadmap for building an intelligence-led security program. This is useful for understanding what threat intelligence capabilities may need to be integrated with an enterprise CTI program	The Intelligence Handbook: Fourth Edition
Recorded Future	Recorded Future maintains a handbook detailing their vendor-biased playbooks for responding to typical CTI-type detections within an enterprise CTI program. This is useful for understanding what threat intelligence response cases may look like in an enterprise CTI program	The Intelligence Playbook: Practical Applications Across the Enterprise
Mandiant	The core skills framework provides enterprises and individuals guidance with three things: 1. determine appropriate development roadmaps to ensure CTI skills progression; 2. provide a guidepost for aspirant CTI analysts to tailor their studies; 3. assist network defenders in understanding the roles and responsibilities of a CTI analyst	The Mandiant Cyber Threat Intelligence (CTI) Analyst Core Competencies Framework
CERTBI	This whitepaper details an enterprise-friendly service architecture for offering an enhanced CTI capability	A service architecture for an enhanced CTI capability