Red Canary Intelligence Team mission and approach

The mission of the Intelligence Team is to analyze threats and produce intelligence that provides context, helps with prioritization, enables better decision making, and improves detection and response for Red Canary employees, our customers, and the information security community. Based on this mission, we focus heavily on tactical intelligence: we want to identify threats that matter to our customers and provide context on those threats to help customers improve their decisions and response. This focus means that we do not heavily focus on the “who” behind the keyboard—for many of our customers, who is conducting activity doesn’t matter. However, what’s happening and how it might affect your security DOES matter. This is why you will see our Intelligence Team focus much more on tactical behaviors than on attributing groups or malware to a specific country. For more on the topic of attribution, check out this blog post.