Threat Intelligence
Threat Intelligence
Threat intelligence is evidence-based knowledge about existing or emerging threats to cybersecurity, including context, mechanisms, indicators, implications, and actionable advice. Threat intelligence helps organizations understand attacker tactics, techniques, and procedures (TTPs) to proactively defend against cyberattacks. Sources include threat feeds, security vendor reports, and community databases.
Related OSINT terms
- IOC (Indicator of Compromise)An Indicator of Compromise (IOC) is forensic evidence suggesting a security breach or malicious activity has occurred. Common IOCs include…
- IP ReputationIP reputation is a score or classification assigned to an IP address based on its historical behavior and associations. IPs…
- IP/Domain BlacklistA blacklist is a database of IP addresses, domains, or email addresses known to be associated with malicious activity such…
- AbuseIPDBAbuseIPDB is a community-driven threat intelligence database where users report IP addresses engaged in malicious activities like hacking, spamming, and…
- MalwareMalware (malicious software) is any software intentionally designed to cause damage, steal data, or gain unauthorized access to computer systems.…
Related Skills
Investigative Skills in Nexus that apply Threat Intelligence to a live case.
- IP Network LocationAssess an IP address’s approximate network and geographic context without identifying a person’s physical location.Pro & Agency
- IP Threat SignalsReview available reputation and threat indicators, including their dates, confidence and limitations.Agency
- IP Abuse HistoryExamine attributed abuse reports and distinguish reported observations from verified responsibility.Agency