Okuzeka
Cybersecurity vocabulary · Security Operations and Monitoring

Threat intelligence

Meaning in cybersecurity, with examples

nounCommon term

In cybersecurity, threat intelligence means: Collected and analysed information about attackers, their methods and their tools that helps an organisation prepare for and detect attacks.

In Turkish: tehdit istihbaratı, siber tehdit istihbaratı

How it is used

Often shortened to 'threat intel' or CTI (cyber threat intelligence). Teams consume threat intel feeds, share information through sector groups such as ISACs and use it to write detections. It ranges from technical IOCs to strategic reports for management.

Example sentences

  1. Threat intelligence shows that this group targets logistics companies in Europe.

  2. We added the new IP addresses from the threat intelligence feed to the blocklist.

Common collocations

  • threat intelligence feed
  • threat intel report
  • cyber threat intelligence
  • share threat intelligence
  • indicator of compromiseA piece of technical evidence that suggests a system may have been attacked, such as a malicious IP address, file hash or domain name.
  • threat actorA person or group responsible for a cyberattack or threat, such as a criminal gang, a state-backed group, a hacktivist or a malicious insider.
  • threat huntingActively searching through systems and logs for signs of attackers who have not yet been detected by automated alerts, often starting from a hypothesis.
  • SIEMSecurity information and event management: a platform that collects logs from many systems, correlates them and raises alerts about possible attacks.

This word in other fields

The same English word can have a different meaning in another field:

More terms: Security Operations and Monitoring

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: