threat-intelligence

What it does: - Searches public websites and social media for information about hackers and attacks - Collects evidence about fake accounts, scams, and malicious websites - Connects pieces of information to understand who is attacking and how - Checks if information from different sources tells the same story - Hands off findings to other teams who can block attacks or catch criminals. When to use it: - You need to understand who is attacking your company - You want to find fake accounts pretending to be your company - You need to track public reports about new malware or hacking campaigns - You want to collect evidence about phishing or scam websites - You need to connect the dots between different attacks to find patterns.