Introduction to threat intelligence
In cyber security, threat intelligence represents sharing contextual threat information on attacks and threat actors across defense environments. Also, Gartner defines threat intelligence as the following: “Threat intelligence is evidence-based knowledge, including context, mechanisms, indicators, implications and actionable advice, about an existing or emerging menace or hazard to assets that can be used to inform decisions regarding the subject’s response to that menace or hazard.”
The information shared in threat intelligence, which is also known as threat intelligence feeds, is divided into three levels:
- Strategic
- Operational
- Tactical
Strategic level
The strategic threat intelligence level is information about the organization’s threat landscape. This type of information usually does not contain technical information and is shared with company managers and decision-makers to help them to...
