Cyber Threat Intelligence Framework

CERT-EU's Cyber Threat Intelligence framework standardises how malicious cyber activity affecting Union entities is identified, analysed and prioritised, defining malicious activities of interest, an ecosystem model, threat categories and domains, threat and actor levels, attribution principles, confidence and uncertainty practices (Admiralty Code, LCA/WEP), MITRE ATT&CK mapping, sectors of interest, and numeric scoring methods for threats and mitigations to support consistent reporting, alerting and response.