In plain English
Threat intelligence is information about who is attacking, how they operate, and what to look for. It feeds into security tools (like Microsoft Defender) as known malicious IP addresses, domains, and file hashes — allowing defences to block known threats automatically while security teams focus on novel attacks.
