What Is Cyber Threat Intelligence?

This MS-ISAC CTI blog explains the team’s mission supporting SLTT entities and how it applies a tailored, recursive intelligence cycle—planning, collection, processing, analysis, and dissemination—to deliver actionable intelligence. It uses a brief case study noting a 173% spike in adversaries leveraging container files to evade Mark of the Web after Microsoft blocked macros, illustrating how CTI identifies emerging TTPs and communicates clear What/So What/Now What guidance to decision-makers.