The Good and Bad of Intelligence Sharing – An After-Action Report

  • Wednesday, February 27, 2013 | 12:00 PM – 12:20 PM | Room: Room 134

View all Sessions

Mandiant decided to release 3000+ indicators of compromise designed to effectively cripple a threat group known as APT1’s operations. This decision was not made lightly. During this session we will discuss why we chose to share this intelligence, debunk some media myths, explain why they’re known as the “Comment Crew”, and provide an update on their operations.


This document was retrieved from on Sun, 26 May 2019 00:17:07 -0400.