Notifications
Clear all
Mandiant Threat Intel Reviews
1
Posts
1
Users
0
Reactions
0
Views
Topic starter
19/07/2026 9:26 am
Everyone parrots "actionable" intel. But how stale is it by the time it hits my SIEM?
I'm talking about the gap from when Mandiant's first on a breach to when IOCs hit my feed. Days? Weeks? If it's more than 48 hours, the value plummets for anything beyond retrospective hunting. Seen too many feeds that are just compliance theater.
* Example: a novel cloud credential stealer pops. Are we getting that before the weekend, or with Monday's coffee?
* Is the "premium" tier actually faster, or just more PDFs?
Need to know if I'm paying for a weather report or a history book.