Security News > 2020 > November > The Term "Threat Intelligence" is Poisoned. It Does Not Mean What You Think it Means.
People have preconceived notions of what threat intelligence is, so they make assumptions in conversations and those assumptions are rarely thought about, much less discussed.
The assumption and filter is that threat intelligence equals external threat data.
Defining threat intelligence as external data makes it impossible to fully appreciate or reap the value of threat intelligence.
You can start thinking about curated threat intelligence as a capability - and not just a feed - that you can build out within your Security Operations Center.
We need to dispel the assumptions that are limiting what threat intelligence can be and, thus, the effectiveness of the SOC. When intelligence becomes a capability and not just subscriptions to feeds, we can gain the full value of intelligence as the foundation to security operations.