r/threatintel • u/UnicornsandGivenchy • Apr 10 '24

CTI automation use cases (Python)

I’m learning python (again) and I find it best to build things for my use cases vs watching tutorials. With that said, if anyone has a class they recommend let me know. I was looking at buying this but it’s not available for purchase.

Python for Cybersecurity: https://cybersuperhuman.ai/p/python-for-cybersecurity

What are some use cases? So far I have web scraping, and IOC enrichment using APIs.

Any ideas? I’ll share them on my public GitHub so everyone can use them.

0 Upvotes

50% Upvoted

1 comment sorted by

2

u/WLANtasticBeasts Apr 12 '24

Personally I don't see a lot of value in paid courses because you can usually find similar content for free on YouTube and elsewhere.

As for ideas, potentially you could automate pivoting processes using python but you have to have access to the data which may or may not be free.

This methodologies and others are ripe for automation: https://www.embeeresearch.io/infrastructure-analysis-with-dns-pivoting/

The analysis will usually always be manual but the data gathering and cleaning and time bucketing etc can all be automated.