Agenda

1. Taxonomy: 
   •  Define the preferred taxonomies that will potentially define synchronization rules.
2. Galaxy Policy:
   • Establishing guidelines for the utilization of galaxies and their role in threat intelligence classification.

Other possible discussions

1. Sharing/Distribution Policy:
   •  Defining and clarifying the scope of confidentiality within SAFER and the broader community, ensuring partners are aware and understand how to handle sensitive information appropriately.
2. Suspension Policies:
   • Establishing clear criteria for the suspension of collaborators, such as lack of engagement (e.g., never logging in) and other.
3. Decay Models Implementation:
   • Deciding on the implementation of decay models to manage the relevance and lifecycle of threat intelligence data.

General recommendations for the community

1. Feed Selection and Quality Assessment:
   • Evaluating and deciding on the most useful feeds for inclusion, while minimizing the risk of false positives.
2. Warning Lists Usage:
   • Determining which warning lists will be enabled and how they will be applied within the community.