Technology and tools
What is Threat intelligence platform?
Software that collects threat data from many sources, removes duplicates, scores it and pushes it to security tools.
A threat intelligence platform, or TIP, aggregates threat data from feeds, sharing groups, reports and internal investigations. It deduplicates, enriches and scores the data, links related items and sends selected indicators to tools such as the SIEM, EDR and firewalls.
A TIP is plumbing. It makes intelligence manageable, but it cannot decide what matters to the organisation. That still depends on requirements and analysts.