threat intelligence

Reports of what attackers are doing right now, such as groups hiding tools in fake browser updates. It is a source of hunting hypotheses.

Where the book teaches it