Webcast: Durable vs. Ephemeral Threat Intel

This is a description of a Black Hills Information Security webcast in which the presenter argues against traditional, indicator-focused threat intelligence and advocates for "durable" threat intelligence that emphasizes persistent attack techniques and behaviors. The talk covers detection approaches (application allow-listing abuse, connection profiling, PowerShell encoding), emulation/iteration methods, and showcases open-source tools and frameworks such as DeTT&CT, Sigma, RITA, MITRE Scorecard, PlumHound, and honeypots to improve detection and threat emulation.