Threat Intelligence
- •
def
- •
gathered information about current and emerging threats, used to inform security decisions
- •
- •
sources
- •
OSINT (Open Source Intelligence) — publicly available information (websites, social media, news, forums)
- •
proprietary/third-party intelligence — commercial threat feeds and research from security vendors
- •
information-sharing organizations — industry groups (e.g., ISACs) that pool threat data across member organizations
- •
dark web intelligence — monitoring underground forums/marketplaces for mentions of an organization, stolen credentials, or planned attacks
- •
- •
- •