THREAT‑WATCH
Glossary
Cyber Threat Intelligence (CTI)
Information about active and emerging threats, attacker tactics, and indicators of compromise, used to inform detection and defense.
Threat intelligence turns raw data about attacker behavior, infrastructure, and tools into actionable context: for example, feeding known-malicious indicators into detection tooling, or informing which vulnerabilities to prioritize based on active exploitation. Good CTI is applied, not just collected: it changes what a SOC actually watches for.