Threat intelligence is practice of collecting, analyzing, and sharing information about cyber threats and sharing to protect organizations from Cyber Threats
Types of Threat Intelligence
Strategic
Strategic Threat Intelligence provides high level threat trends to organisation. They are non technical which are used by leaders and executives to take strategic decisions with respect to Cyber Security Threat and strategies for protecting the organisation.
Tactical
Tactical Threat Intelligence provides information on tactics, techniques, and procedures (TTPs) used by threat actors when performing attacks. This information can be used to understand the threat actors and their threats.
Technical
Technical threat intelligence focuses on the technical aspect of the threat like Indicator of Comprise (IOC) referring to IP addresses, File Hashes, Domains which can be used by the SOC team to detect and prevent the threats.
Operational
Operational threat intelligence provides information on the motive of the threat adversary.