Threat Intelligence
Evidence-based knowledge of actors, campaigns and indicators — not raw feeds.
Short answer: Threat intelligence turns signals about actors, campaigns, tools and vulnerabilities into decision-ready knowledge, always confidence-tagged and evidence-linked for human review.
Evidence: MITRE ATT&CK · CISA · Vendor research · Public attribution · Human reviewed
Definition
Threat intelligence turns signals about actors, campaigns, tools and vulnerabilities into decision-ready knowledge, always confidence-tagged and evidence-linked for human review.
Major Entities
- CVE — CVE-2023-34362 (MOVEit)
- CVE — CVE-2021-26855 (ProxyLogon)
Timeline
- — SolarWinds reshapes supply-chain attribution
- — AI-era citation and freshness drive intelligence trust
Latest Intelligence
- State-actor cloud intrusions
- Zero-day-first criminal groups
Evidence & Sources
MITRE ATT&CK · CISA · Vendor research · Public attribution · NVD · CISA KEV · MITRE ATT&CK
Related Intelligence
- Threat actor: Apt28
- Threat actor: Apt29
- Threat actor: Sandworm
- Threat actor: Lazarus Group
- Threat actor: Volt Typhoon
- Campaign: Solarwinds Sunburst Supply Chain
- Campaign: Hafnium Exchange Exploitation
- Campaign: Moveit Cl0p Exploitation
- Research: Attribution confidence models
- Research: Intelligence lifecycle frameworks
Next Actions
Part of the OpenTrojan Security Knowledge Hub 2.0: Ransomware · Malware · Vulnerability Management · Cloud Security · Identity Security · Supply Chain · Incident Response · Zero Day · Nation State Threats