Skip to main content

Build A Sector Threat Brief

These retained guides document AdversaryGraph v7.0.0. Latest published stable release: v8.1.2. Current development: 8.1.2, verified 2026-10-20 at source commit 789d874. Historical screenshots and instructions are not evidence of current-release behavior.

Build Sector Threat Brief workflow

Level: Intermediate

Goal: Create a practical threat brief for one sector/customer.

Real-Life Scenario​

A telecom customer asks which actors and techniques are most relevant to their environment this quarter.

When To Use This​

Use this workflow when you need a structured analyst workflow and want the output to remain traceable to evidence.

Steps​

  1. Open Sector Intel.
  2. Select sector, region, technologies, and activity window.
  3. Review actor ranking and evidence reasons.
  4. Show relevant TTPs on matrix.
  5. Summarize top actors, TTPs, and detection priorities.

Expected Result​

Sector-specific actor and ATT&CK priority brief.

Review Notes​

  • Keep source labels and evidence attached to every accepted result.
  • Treat actor matches, enrichment hits, and matrix overlap as analytical signals until corroborated.
  • Export only reviewed findings for customer, SOC, detection engineering, or executive use.