Blue Team Con 2026

10:30am CDT

Threat Intelligence at the Speed of Cyber Defense

Saturday September 12, 2026 10:30am - 11:30am CDT

Cyber threat intelligence (CTI) is essentially a decision support function within cybersecurity. As such, CTI that cannot enable, improve, or otherwise facilitate a security action is of questionable value. This is often evaluated in terms of CTI relevance, applicability, or accuracy, but the relationship between CTI and security actions also demands investigation of another metric: timeliness. CTI that arrives too late for the supported decisions is functionally irrelevant.

In this discussion we will explore the implications of a time-oriented view for CTI production, dissemination, and integration into operationally-focused decision making. From this we will identify a key tension at the core of CTI analysis and production: that the SPEED at which CTI is produced and disseminated is often in conflict with the QUALITY or DEPTH of the produced CTI. Organizations cannot have immediate decision support on tactically-relevant timescales while simultaneously having deep context in the current environment. As a result, tradeoffs are necessary to both recognize and navigate in developing a relevant CTI function. Furthermore, evaluating CTI becomes a question of determining audience and customer needs, purpose, and response timelines to appropriately structure CTI support for the entity or specific decision maker in question.

To conclude this discussion, we will examine the possibility of eliminating (or at least reducing) this dilemma through technical means. Particularly future progress in the field of artificial intelligence may allow CTI functions to tap into mechanisms where context or detail and timeliness are no longer in direct conflict with one another, mapping out an effective and meaningful way for AI to support CTI and broader security functions.

Speakers

Joe Slowik

Director, Cybersecurity Alerting Strategy, Dataminr

Joe Slowik has over 15 years of experience across multiple cyber domains, from threat intelligence to detection engineering to incident response. Joe currently works as director for cyber alerting strategy at Dataminr, and has previously held roles at organizations including the MITRE... Read More →

Saturday September 12, 2026 10:30am - 11:30am CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA

Talk

Company Dataminr
Audience Intermediate
Subject Threat Intel and DFIR
global Y

Blue Team Con 2026

From $0.00

Tickets

Success you have shared X tickets.

Blue Team Con 2026

10:30am CDT

Joe Slowik

Get help with the event

Choose your checkout method

Success you have shared X tickets.

Blue Team Con 2026

10:30am CDT

Joe Slowik

Get help with the event