Threat intelligence transforms raw data into actionable insights.
Types of intelligence
- Strategic: High-level trends for executives and board.
- Tactical: TTPs (tactics, techniques, procedures) for security teams.
- Operational: Specific campaigns and threat actor activity.
- Technical: Indicators of compromise (IOCs) - IPs, domains, hashes.
Intelligence cycle
- Requirements: Define what intelligence is needed.
- Collection: Gather data from internal/external sources.
- Processing: Normalize and enrich raw data.
- Analysis: Identify patterns and assess impact.
- Dissemination: Share intel with stakeholders.
- Feedback: Refine based on effectiveness.
Sources
- Commercial feeds (Recorded Future, Mandiant).
- Open-source (MISP, AlienVault OTX).
- ISACs (Information Sharing and Analysis Centers).
- Internal telemetry and incident data.
Related Articles
View all articlesOllama vs llama.cpp vs LM Studio: The Speed Tax, Measured
LM Studio, Ollama, and raw llama.cpp all run the same engine on the same GPU. We measured what the convenience layer costs: LM Studio adds 0.3%, Ollama adds 10%.
Read article →How Low Can You Quantize a GGUF Model Before Quality Breaks?
We swept Qwen2.5-Coder-7B from Q2 to Q8 on an RTX 5060 Ti. Output fidelity goes 21% at Q2, 57% at Q4, 80% at Q6 — the cliff is below Q4, and the sweet spot is Q4–Q5.
Read article →KV-Cache Quantization: The q4_0 Cliff Your Logs Won't Warn You About
We benchmarked f16 vs q8_0 vs q4_0 KV caches on the same model. q8_0 KV is nearly lossless (81.6% similar). q4_0 KV wrecks output quality (8.3%) while saving VRAM — and your throughput dashboard stays green the whole time.
Read article →The VRAM Cliff: 15× Slower the Moment Layers Spill to CPU
We swept -ngl from 0 to 99 on a 14B model: 2.89 → 43 tok/s as it moves onto the GPU. Partial offload is a cliff, not a slope — and the last 8 layers matter most.
Read article →Explore More Threat Intelligence
View all termsAdvanced Persistent Threat (APT)
A sophisticated, long-term cyberattack where an intruder gains unauthorized access and remains undetected for an extended period to steal data or cause damage.
Read more →Credential Stuffing
An automated attack that uses stolen username/password pairs from data breaches to gain unauthorized access to user accounts on other services.
Read more →IP Reputation
A trustworthiness score (0-100) assigned to IP addresses based on observed malicious behavior, spam activity, and threat intelligence data.
Read more →Keylogger
Malicious software or hardware that secretly records keystrokes to capture passwords, credit card numbers, and other sensitive information typed by users.
Read more →Malware
Malicious software designed to damage, disrupt, or gain unauthorized access to computer systems and data.
Read more →Phishing
A social engineering attack that uses fraudulent communications to trick recipients into revealing sensitive information or installing malware.
Read more →