Solutions

Booz Allen Cyber Threat Intelligence Services

Protect your enterprise with tailored threat intelligence

Booz Allen Cyber Threat Intelligence Services give your organization comprehensive, context-rich threat intelligence that enables your security team to prioritize strategic decisions and proactively protect against evolving cyber threats. Our services are powered by a dedicated, elite team of Booz Allen analysts who tailor actionable threat intelligence to your organization’s specific needs.

Our Process

It begins with a detailed service onboarding in close partnership with your executive team, security leadership and relevant stakeholders. At this stage, we define specific risks, security requirements and controls at the business, operational, technology levels.

Next, we develop a comprehensive plan that includes pre-defined rules of engagement, severity levels, collection requirements, notifications, and escalation procedures. From here, we begin delivering specific threat intelligence services into your organization.

Drawing on the expertise of a diverse group of analysts, we deliver insights that allow you to stay informed of the latest cybersecurity developments impacting your business, industry, threats targeting your organization, executives, and operating geographies.

Lastly, we look towards the future, leveraging strategic insights and knowledge of threat actors’ intentions to anticipate what may come next. We apply continuous learning from attack attempts to constantly fine tune your defenses and intelligence capabilities—keeping you ahead of future attacks.

Comprehensive Insights from a Multidisciplinary Team

Our international, multilingual team of analysts continuously monitor every corner of the Internet—from the open web to the dark web and everything in between—using a powerful suite of proprietary, battle-tested platforms and intelligence gathering measures. Leverage our expansive ingestion set that includes globally-deployed endpoints and network sensors to strengthen your comprehensive arsenal.

To give you a comprehensive view of the threat landscape, our services combine the expertise of multiple disciplines, including:

Accredited incident responders
Computer forensics experts
Malware reverse engineers
Journalists
Linguists
Academics
Anti-fraud specialists
Private investigators
Lawyers
Former law-enforcement professionals

Deep analysis. Flexible delivery.

To meet your specific threat intelligence needs, we provide your organization with modular services that integrate seamlessly into your business and security program:

Subscription Service Offering	Service Description
Intelligence Reporting Service	Focused, phased production on intelligence requirements that address broad client needs and on-going security concerns Proactive reporting with a focus on intelligence that continuously informs your security posture Access to our curated intelligence repository (Optional) Add custom priority intelligence requirements based on your specific needs
Requests for Intelligence (RFI)	On-demand intelligence reports Comprehensive answers to your cyber questions through the combined expertise of dark web analysts, malware reverse engineers, private investigators, and linguists
On Demand Malware Analysis	Submit malware files for automated analysis by Booz Allen’s proprietary analysis framework Includes sandboxing, machine learning, file carving, YARA, Bro, and Suricata-based detection Comprehensive report of all detections
Attacker Reconnaissance	Quarterly analysis of customer’s external posture, viewed through the “eyes of an attacker” Immediately reduce attacker return on investment during their reconnaissance phase
Dark Web Services	Private investigatory services for data and digital goods recovery

Delivery Formats that Fit Your Needs

Our subscription service offers multiple delivery channels to meet your unique requirements and integrate seamlessly with your organizations’ security program.

Automated analysis—gives your analysts and responders access to our fully-managed dynamic analysis platform with an elegantly simple interface.
The Intelligence Portal—provides access to the complete online library of historical reporting for your specific subscription.
Focused reporting—intelligence requirements and industry insights delivered via email.
On-demand access to top cyber intelligence analysts to provide the business context and understanding of how to adapt your defenses.

Our Partners

A Strategic Partnership with Splunk and Booz Allen A premium content subscription that automatically correlates threat intelligence with data and events in Splunk Enterprise Security. This capability allows you to seamlessly integrate and immediately operationalize cyber threat intelligence into your existing security environment.

Booz Allen Managed Threat Services Portal

Access to our curated intelligence repository, delivering a comprehensive stream of threat indicators and context-rich reporting. The portal empowers you to decide which threats matter most and prioritize your defensive strategies accordingly.

Contact Us

Thank you for your interest in Booz Allen Managed Threat Services. If you would like to learn more, please fill out the form below. We look forward to speaking with you soon!