SOC
استخبارات التهديدات
Evidence-based knowledge about existing and emerging threats, derived from analysis of indicators, adversary behavior, and context, which is used to inform defense strategies and enable proactive mitigation, as described in NIST SP 800-150, MITRE ATT&CK, and ISO/IEC 27002.
Quick answer: Evidence-based knowledge about existing and emerging threats, derived from analysis of indicators, adversary behavior, and context, which is used to inform defense strategies and enable proactive mitigation, as described in NIST SP 800-150, MITRE ATT&CK, and ISO/IEC 27002.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Quick answer
Evidence-based knowledge about existing and emerging threats, derived from analysis of indicators, adversary behavior, and context, which is used to inform defense strategies and enable proactive mitigation, as described in NIST SP 800-150, MITRE ATT&CK, and ISO/IEC 27002.
Why it matters
استخبارات التهديدات matters because it supports clear communication in SOC contexts for SOC Analysts, Security Engineers, and Incident Responders. It also connects to aviation training and exam language such as CISSP, CompTIA Security+, and CEH.
Editorial context
This page is rendered as static HTML from source-backed terminology data so search engines and AI systems can parse the content without client-side code.
Definition
Evidence-based knowledge about existing and emerging threats, derived from analysis of indicators, adversary behavior, and context, which is used to inform defense strategies and enable proactive mitigation, as described in NIST SP 800-150, MITRE ATT&CK, and ISO/IEC 27002.
Operational example
Threat intelligence feeds provided actionable indicators of compromise, enabling SOC analysts to block malicious IP addresses before any lateral movement occurred.
Localized term
استخبارات التهديدات
Localized example
قدمت خلاصات استخبارات التهديدات مؤشرات قابلة للتنفيذ على الاختراق، مما مكّن محللي مركز العمليات الأمنية من حظر عناوين IP الضارة قبل حدوث أي حركة جانبية.
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
