Recorded Future Intelligence Services
Recorded Future Intelligence Services offers industry-leading expertise and tradecraft to complement our AI-driven Intelligence Platform. Our global services team empower organizations to become intelligence-led by advancing their practices no matter where they are in their journey. The Intelligence Services teams offer capabilities for clients to reduce business risk and transform security operations in order to build greater cyber resilience. Here, you can explore a variety of engagements that can be provided by redeeming available Intelligence Services Credits. Each service has a set credit value, and your credits can be used across any combination of services listed.
Professional Services (Automation)
Service Name
Description
Credit Amount
Security Operations Capabilities Review
An onboarding engagement to better understand our customers priorities, security organization, tools leveraged, important use cases and direct them to the usage of integrations and services that would fit their objectives.
1
Security Operations Use Case Development
For technical operations to scope and implement use cases that can leverage Recorded Future’s intelligence in SIEM and SOAR environments. Deliverables generally include playbooks, correlations rules, workflow recommendations for Customers to implement.
1-3 (scoping required)
Solutions Architecture Review (AR +)
The Solutions Architecture Review leverages Recorded Future experts in the SOC design and the security tool integration space to review an organization’s current security operations, strategy and capabilities. This review will lead to the creation of a design that can be leveraged to help identify and provide roadmap recommendations to enhance existing operations and integrations. Outcomes may include; better use of current integrations, unrealized capabilities leveraging the platform or intelligence data, following focused workshops on topics of interest (e.g. vulnerability analysis, use case development).
1-3 (scoping required)
Integration Deployment
Remote assistance with implementation and initial configuration of integration with a single application as listed here: https://www.recordedfuture.com/integrations/details. This helps to ensure a successful start to the deployment via best practice set-up, data flow, and configuration for your use cases.
We will review the current integration set up with you to help ensure your current integration is working to its full potential. This will enable us to review whether the settings are configured to give optimal results and help map your metrics to outcomes.
We will review the current integration set up with you to help ensure your current integration is working to its full potential. This will enable us to review whether the settings are configured to give optimal results and help map your metrics to outcomes.
1
Integration Health Check
A comprehensive evaluation to optimize the performance of a single available Recorded Future integration. This health check ensures the integration aligns with best practices, leverages the full capabilities of the third-party tool or platform, and continues to meet your evolving business needs.
1
Vulnerability Analysis
Our Solutions Architecture team will facilitate a comprehensive analysis of your vulnerability scans and workflows. We will deliver a report of prioritized vulnerabilities and enhance your scans by incorporating Recorded Future's threat intelligence. Additionally, if integration pathways are available, we will recommend pre-built integrations to help you establish a repeatable process, ensuring continuous improvement in your security posture.
1
Custom Integration Configuration
Assistance in engineering data flows and interaction between Recorded Future APIs and third-party systems.
scoping required
Advisory Services (Tradecraft)
Service Name
Description
Credit Amount
Alert Benchmarking Workshop
Deep dive review on the performance of Recorded Future Alerts related to your Priority Intelligence Requirements. Configure Alerts and receive recommendations on how to optimize Alert workflows in Recorded Future.
1
Capture-The-Flag
Competitive training scenarios designed in the Recorded Future Platform. The interactive workshop will test what analysts have learned with prizes for winning teams.
1
Custom Solution
If there is a topic or requirements outside of what's listed in the catalogue, we offer a personalized, high-value service tailored to your unique needs. This option ensures a customized approach that goes beyond the standard offerings in our service menu, giving you access to specialized expertise and a bespoke solution.
1-3 (scoping required)
Intelligence Capability Assessment
Benchmark your current Intelligence program against wider industry and explore recommendations to continue maturing your organization’s program.
1
Intelligence Objectives Workshop
Identify and map intelligence and compliance objectives to turn them into Priority Intelligence Requirements so you can build the foundations of an intelligence-led security program.
1
Threat Briefing
Our intelligence experts have a variety of subjects they can cover with briefings based on Recorded Future intelligence and research.
1
Tabletop Exercise
Work through a real-world security scenario and learn how to mount an effective response to simulated threats with Recorded Future.
1
Threat Profiling Workshop
Identify the most pertinent intelligence gaps and map these to the MITRE Framework. Additionally, receive recommendations on specific remediations regarding threat actors looking to target you.
1
Threat Reporting Workshop
Review best practices for writing and presenting tactical, operational, and strategic intelligence using Recorded Future.
1
Malware Intelligence for Incident Response
Implement processes to apply Malware intelligence based on IOCs & Signatures gathered from your environment and recommend ways to narrow investigation and extract most impactful indicators.
1
Hunting in the Sand (Threat Hunting)
Implement repeatable workflows to assess risk to organization from priority threat actors and malware enriched with Malware Intelligence
1
Intelligence Expert Access
Boost efficiency and confidence with guided expert support — 3 sessions per quarter to help you plan, pivot, and enhance Recorded Future with clarity. Our experts will help you unlock the full potential of Recorded Future.
Example Use Cases:
- Hands-on help with users and teams on how to best operate platform
- Developing or reviewing customer workflow for best practices
- Can you validate if an alerting rule was built correctly
*Sessions are up to 1 hour of customer face time each and there can be up to an additional 2 hours for pre/post follow up
*Sessions cannot be rolled over to additional quarters
1 Credit per Quarter
Analyst on Demand
Service Name
Description
Credit Amount
Periodicals
Weekly, monthly, quarterly, or annual reports, tailored to your organization, industry, and additional specific scope requirements. These reports can include analysis of other topic areas such as global cyber threats, threats to emerging technology, regional threats, and more.
Scoping required
Threat Intelligence Report
Reports customized to meet specific intelligence requirements. These reports can include analysis of various topic areas, including industry threat landscapes, threat actor profiles, malware profiles, MITRE ATT&CK Mapping and Analysis, business risk and executive protection, and more.
Scoping required
Threat Actor Engagement
The acquisition of datasets or information offered by a threat actor.
Starts at 3 credits
Hunting Package
An overview of a malware family or threat actor with a focus on technical reporting. These reports include new detections (Sigma, YARA, Snort, Suricata) based on samples provided or those that analysts are able to acquire via our research tools.
3-5 credits (scoping required)
Data Exposure
The acquisition of exposed data, whether credentials posted for sale on dark web auto-shops or datasets or information posted by a threat actor.
Scoping required
Trending Intelligence
Premium reports on a variety of the most important security topics of the day. These reports are listed here and available immediately.
Scoping required
Managed Services
Service Name
Description
Credit Amount
Managed Monitoring Services
By enhancing your security team with our dedicated team of security experts and analysts, you will be able to manage increased workloads and alert volumes. Our team of experts is ready to assist with the various types of monitoring required to help protect your organization. We are available 24x7x365 to help monitor, troubleshoot, and remediate the threats that your security team is facing.
Scoping required
How It Works:
- Select Engagement: Browse the service catalogue above. Each engagement listed includes an estimated credit amount required for provision. The specific credit cost will be dependent on the full size and scale of the activity scoped in collaboration with you.
- Redeem with Credits: Once you've selected an engagement, reach out to your CSM. This will initiate a process by which a member of our intelligence advisory and integration services teams will discuss the details of the engagement to best meet your needs.
- Close the Loop: We’ll provide a deliverable at the conclusion of the service, summarizing the work as well as the used credits.
Terms and Conditions
- Services are subject to personnel availability and may vary over time.
- Intelligence Services Credits expire within twelve (12) months of purchase
- In the event the Subscription Term exceeds twelve (12) months, the number of Credits issued will be available for each twelve (12) month period. Credits do not roll-over between twelve (12) month periods.
- In the event that the Term is less than twelve (12) months, or includes a period with less than twelve months, the number of Credits issued will be pro-rated for the length of the Term. For example, a twenty-one month Term would only include 75% of the listed Credits after the first twelve months.
- Except as listed, a scoping call shall be required for any Intelligence Service engagements to determine number of credits and timelines.
- Credits are non-refundable once purchased and must be redeemed within the specified period.
- Redemption of credits does not constitute ownership of any underlying intellectual property, and may be subject to further scoping and terms outlined within each service description.
- Credits cannot be exchanged for cash or transferred.
- Only organizations with a Module license to the Recorded Future Platform are eligible to purchase Intelligence Services Credits
By redeeming Credits, you agree to these terms and any additional guidelines outlined in our full Terms of Use.