News on targeted attacks are currently flooding the Internet.
The questions related to
the attacks remain very similar and manifest the so-called threat intelligence, that simplified means of understanding the problem. The collected information (including open questions) help to predict the future and help to formalize precautions, providing protection against similar threats.
In my presentation I try to disclose some stories of our recent investigations and show in some detail how important information related to the story can be obtained. I try to focus on opportunities, tools, information sources to get some insight into such investigations. I'll try to help understanding the possibilities and the problems of the investigations.