What Is Operational Intelligence?

According to Gartner's definition of threat intelligence, threat intelligence is some kind of evidence-based knowledge, including context, mechanisms, labels, meanings, and recommendations that can be implemented, which are related to existing or planned threats or hazards, It can be used to provide information support for asset-related entities' response or processing decisions to threats or hazards. Most of the threat intelligence in the industry can be considered as narrow threat intelligence, whose main content is the identification of the traps used to identify and detect threats, such as file HASH, IP, domain name, program running path, registry entries, etc., and related Attribution label.