All Articles
Filter by Category
From Planning to After-Action: The Full Reporting Lifecycle of Major Events
Event security reporting doesn't begin when the gates open — it starts weeks earlier with threat assessments and venue profiling, and it doesn't end until the after-action review is filed. This piece follows Celeste, a hypothetical senior event security analyst preparing for a 200,000-person music festival, through all four stages of the reporting lifecycle: pre-event threat assessment, operational daily SITREPs, real-time incident reports, and post-event after-action review.
The Digital Battlefield: Cyber and Physical Threats Converging at Major Events
When a cyberattack hits a major event, the consequences rarely stay contained to IT systems — they show up at the gates, in the crowd, and on the stadium floor within minutes. This piece follows Crystal, an event security analyst managing a major sporting event, through three scenarios where digital incidents cascade directly into physical emergencies: a ticketing system breach, a compromised venue app, and a coordinated deepfake and drone threat. Each scenario illustrates the same underlying problem: most event security teams are still running separate workflows for cyber and physical threats, which means when the two converge, nobody has the full picture.
11 Reports Cyber Threat Intelligence (CTI) Analysts Can Create Faster & More Reliably with Indago
Cyber threat intelligence analysts produce a wide range of reports—from actor profiles and malware analysis to TTP deep dives and vulnerability exploitation briefings. This article explores 11 common CTI reports teams create and the workflows behind them. Learn how analysts can streamline the reporting process using Indago while maintaining full control over analysis and validation.