IronSights

Detection & response

Threat intelligence

Evidence-based knowledge about existing or emerging cyber threats, including attacker tactics, techniques, procedures, indicators of compromise, and contextual information used to inform defensive decisions.

Also known ascyber threat intelligenceCTIthreat feeds

In plain English

Threat intelligence is information about who is attacking, how they operate, and what to look for. It feeds into security tools (like Microsoft Defender) as known malicious IP addresses, domains, and file hashes — allowing defences to block known threats automatically while security teams focus on novel attacks.

Keep learning

More terms in the IronSights Glossary.