A security operations team is organizing its threat intelligence pipeline to improve context, automation, and threat response capabilities across different enterprise monitoring tools. Match each threat intelligence source type on the left to its corresponding operational characteristic or operational capability on the right.
- Information Sharing and Analysis Center (ISAC)Delivers sector-specific threat indicators and contextual analysis shared confidentially among peer organizations in the same industry.
- Commercial / Proprietary Threat FeedProvides curated, machine-readable threat data backed by service level agreements (SLAs) and dedicated provider support.
- Open-Source Intelligence (OSINT)Offers freely accessible, broad-spectrum threat insights gathered from public blogs, code repositories, and security research posts.
- National Vulnerability Database (NVD)Maintains a standardized, publicly accessible repository of common vulnerabilities and exposures (CVEs) paired with CVSS scoring.
Cevap
Information Sharing and Analysis Center (ISAC) matches sector-specific peer sharing; Commercial/Proprietary Feed matches curated SLA-backed data; Open-Source Intelligence (OSINT) matches freely accessible public threat insights; National Vulnerability Database (NVD) matches standardized CVE and CVSS repositories.
Each intelligence source type is matched to its primary operational framework: ISACs provide sector-specific peer sharing, Commercial feeds provide SLA-backed curated intelligence, OSINT provides freely accessible public research, and NVD provides standardized vulnerability tracking with CVE/CVSS identifiers.
Adım Adım Çözüm
Anahtar Kavram
Threat Intelligence Sources and Research