tiq-test

Threat Intelligence Quotient Test (tiq-test) is a data visualization and statistical analysis tool designed for evaluating threat intelligence indicator feeds. The tool provides capabilities for measuring the quality and effectiveness of threat intelligence feeds through various analytical tests. It includes functionality for assessing the aging characteristics of threat intelligence data and evaluating the uniqueness of indicators within feeds. Originally developed for presentation at cybersecurity conferences including BSides LV 2014, DEF CON 22, OpenDNS S4 IRespond, and HushCon 2014, the tool focuses on quantifying the "IQ" or intelligence quotient of threat intelligence sources. The tool incorporates additional testing methodologies for aging and uniqueness analysis that were presented at nbtcon 2014 and SANS CTI Summit 2015. These features enable security professionals to evaluate the temporal relevance and distinctiveness of threat indicators. The implementation includes R Markdown sources and associated data repositories available through GitHub, providing transparency in the analytical methodologies used for threat intelligence assessment.