NEW2CTI | Operationalizing CTI: From PIRs to Priority TTPs

NEW2CTI | Operationalizing CTI: From PIRs to Priority TTPs 🎙️ Ondra Rojcik, CTI Analyst, Red Hat 🎙️ Keith Swagler, CTI Analyst, Red Hat 📍 Presented at SANS CTI Summit 2026 The value of Priority Intelligence Requirements (PIRs) is well-known in CTI, yet many teams, including ours, struggle to translate these high-level concepts into tangible, day-to-day actions of Security Operations, and Cyber Defense activities. This presentation offers a direct, no-fluff walkthrough of how to transform PIRs from a strategic document into an **engine for proactive cyber defense**. It moves beyond theory, providing a practical, step-by-step guide to operationalizing PIRs. This talk will equip attendees with the immediate, actionable methodology required to transform strategic Priority Intelligence Requirements (PIRs) from a document into an engine for proactive cyber defense. Participants will leave prepared to integrate intelligence directly into their detection rules, threat hunts, and red team exercises, thereby ensuring a truly threat-informed security posture.