Comprendre le renseignement sur les cybercriminels, avec Anna Guetat de Recorded Future

Comprendre le renseignement sur les cybercriminels, avec Anna Guetat de Recorded Future

by Anna Guetat

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Anna Guetat 👥 204K 📅 September 8, 2025 ⏱ 39 min 👁 17K 📄 expert opinion 🧭 2026-08-17
Available in: English (current) Français

Keywords

CTIAIthreat intelligencecybersecurityROI

Summary

In this interview, Anna Guetat, VP of Cyber Operations and AI Engineering at Recorded Future, explains the fundamentals of cyber threat intelligence (CTI). She defines CTI as the collection and analysis of vast amounts of internet data to provide actionable insights about threat actors targeting an organization. She emphasizes the importance of CTI in proactive defense, contrasting it with reactive tools like SIEM and EDR. Guetat discusses the role of AI in enhancing CTI, including natural language processing, image analysis, and generative AI for summarization and report generation. She acknowledges limitations such as hallucinations and the need for human oversight. The conversation covers measuring ROI of CTI, the strategic mistake of relegating CTI to a secondary role, and emerging AI-powered threats. Guetat highlights Recorded Future’s use of AI and its intelligence graph to provide contextual threat intelligence. She concludes that while AI brings complexity, it ultimately simplifies cybersecurity operations and that human analysts remain essential for decision-making.

157 words

Critical Evaluation

Value of the Information & Strength of the Argument

The interview provides valuable insights into the practical application of CTI and AI in cybersecurity. Guetat argues convincingly that CTI is essential for proactive defense, offering concrete examples such as monitoring new domains and IPs to detect threat actor activities. She effectively explains the ROI of CTI by focusing on operational efficiency and decision-making rather than just time-to-action. The discussion on AI’s role is nuanced, acknowledging both benefits and limitations. Guetat’s argument that AI enhances rather than replaces human analysts is well-supported, with examples like automated Yara rule generation and natural language search across malware reports. The reasoning is coherent and grounded in real-world experience, though it is primarily opinion-based rather than data-driven.

Scientific Rigor, Source Quality, Title Accuracy

The speaker’s expertise lends credibility to the content, but the interview lacks explicit citations to external sources. The title accurately reflects the content, which is a focused discussion on CTI. The conversation is well-structured, covering definitions, applications, ROI, AI integration, and future threats. However, as an expert opinion, it does not provide verifiable references or data to support claims. The lack of sources is a limitation for rigorous scientific evaluation, but the practical insights are valuable for professionals in the field.

209 words

Title / Content Match

The title accurately reflects the content, which focuses on cyber threat intelligence and its application in cybersecurity.

Quality & Reliability

8/10

The speaker is a VP at Recorded Future with 20 years of experience, providing expert insights grounded in industry practice. The discussion is coherent and technically accurate, though it is an opinion piece without peer-reviewed sources.

Chapters

Cited Sources

Concurring Sources

Contribution & Novelties

The interview provides a clear and practical overview of cyber threat intelligence, emphasizing its strategic importance and the integration of AI. It offers unique insights from a senior industry professional, particularly on measuring ROI and the role of AI in enhancing CTI. The discussion on AI limitations and the need for human oversight is particularly relevant.

Pour aller plus loin :

  • Cyber Threat Intelligence - Wikipedia — Provides a general overview of CTI concepts.
  • Artificial Intelligence in Cybersecurity - NIST — Discusses AI applications in cybersecurity.
  • Recorded Future — The company’s official website, offering further information on their CTI solutions.

100 words

Radar Profile

The radar profile shows high scores in information quantity, quality, and reliability, with a slightly lower technical level. This indicates a well-informed and credible discussion, though it is more accessible than deeply technical.

Reliability 8/10