Conduct a research and provide a brief comments to this Wiki page. 

Topic:  Chapter 9 Correlation 

Wikis for Learning and Collaboration

A Wiki is a collaborative web site that collects and organizes content, created and revised by its users. The most well-known example is Wikipedia. Wikis are a way to grow a knowledge base around a particular content area, be it best practices in a particular field or how to use a specific piece of hardware/software. A hallmark of Web 2.0 is that it improves as more people use it and this approach underlies wiki-based learning. It is based on the idea that within any enterprise, a great deal of knowledge exists among the members. Sharing this knowledge and information can raise the organization’s intelligence level, be it a university, an association, a corporation or club.

Move forward and contribute to this Wiki page.

Each student will create a new wiki entry from a peer-reviewed research paper that pertains to the week’s assigned reading, or provide a summary or substantive commentary on an existing wiki entry.

  *Remember to put your name in your post.

Wiki Topic &  Detail Instructions Inside.

Given the vast amount of known threat indicators and level of network activity today, automation has become a necessity. It’s often difficult and time consuming for human analysts to efficiently manage large amounts of granular data and a wide range of cognitive biases. Therefore, manual threat correlation is often too slow to keep up with the amount of data generated, results include a high number of false negatives and positives, and outputs are not always reproducible.

However, performing manual threat correlation processes will remain crucial. The human brain’s ability to leverage well-formed biases and perform higher-order reasoning is essential for assessing the validity and value being provided by whatever solutions your organization uses as well as building your cyber threat management team’s knowledge base. Thus, even when automated methods are employed, the final tier of analysis typically uses these human abilities for sense-making before any actions are taken.

Conduct your own research and post something relevant about the topic such as :

• Field Techniques of Comparison? 
• Rules for Based Matching?
• What is Fuzzy Matching?

Bonus point

How threat actors can evade detection via threat correlation?