SOC

Threat Intelligence

Evidence-based knowledge about existing and emerging threats, derived from analysis of indicators, adversary behavior, and context, which is used to inform defense strategies and enable proactive mitigation, as described in NIST SP 800-150, MITRE ATT&CK, and ISO/IEC 27002.

Quick answer: Evidence-based knowledge about existing and emerging threats, derived from analysis of indicators, adversary behavior, and context, which is used to inform defense strategies and enable proactive mitigation, as described in NIST SP 800-150, MITRE ATT&CK, and ISO/IEC 27002.

This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.

Languages

Arabic Deutsch English Espanol Francais Hindi Bahasa Indonesia Italiano Japanese Portugues Russkiy Thai Turkce Vietnamese Zhongwen

Quick answer

Why it matters

Threat Intelligence matters because it supports clear communication in SOC contexts for SOC Analysts, Security Engineers, and Incident Responders. It also connects to aviation training and exam language such as CISSP, CompTIA Security+, and CEH.

Editorial context

This page is rendered as static HTML from source-backed terminology data so search engines and AI systems can parse the content without client-side code.

Questions and answers

What is Threat Intelligence?

In this glossary, Threat Intelligence refers to: Evidence-based knowledge about existing and emerging threats, derived from analysis of indicators, adversary behavior, and context, which is used to inform defense strategies and enable proactive mitigation, as described in NIST SP 800-150, MITRE ATT&CK, and ISO/IEC 27002.

How is Threat Intelligence used in cybersecurity?

In cybersecurity communication, this term appears in contexts such as: "Threat intelligence feeds provided actionable indicators of compromise, enabling SOC analysts to block malicious IP addresses before any lateral movement occurred."

Why does Threat Intelligence matter in cybersecurity?

Who uses Threat Intelligence?

Threat Intelligence is mainly used by SOC Analysts, Security Engineers, and Incident Responders.

What category does Threat Intelligence belong to?

In this glossary, Threat Intelligence is grouped under SOC. Related pages in this category explain adjacent procedures, commands and operational concepts.

Where does this definition come from?

This definition is sourced from ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK and published by Protermify Cybersecurity as a static cybersecurity reference page.

Definition

Operational example

Threat intelligence feeds provided actionable indicators of compromise, enabling SOC analysts to block malicious IP addresses before any lateral movement occurred.

Definition language

English reference definition

Source

ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK

Exam relevance

CISSP
CompTIA Security+
CEH

Target audience

SOC Analysts
Security Engineers
Incident Responders

Related terms

Use the related links below to continue through connected cybersecurity terminology.

Back to glossary