# Cyber Threat Intelligence **Aliases:** CTI **Entity class:** Intelligence discipline and operational product ## Definition **Cyber threat intelligence** is analyzed information about cyber actors, infrastructure, capabilities, vulnerabilities, malware, intent, targeting, and activity that supports defensive or investigative decisions. It turns raw telemetry or commercial data into assessed indicators, relationships, context, and courses of action. ## Relationships - **national integrator:** [[wiki/Cyber Threat Intelligence Integration Center|CTIIC]]. - **commercial sources include:** [[wiki/Searchlight Cyber|Searchlight Cyber]] and [[wiki/Team Cymru Advanced Recon|Team Cymru Advanced Recon]]. - **investigative use:** [[wiki/Homeland Security Investigations|HSI]], digital forensics, and [[wiki/Case Management and Analytics Platform|CMAP]]. - **mission domains:** [[wiki/Cybersecurity|Cybersecurity]] and [[wiki/Counterterrorism|Counterterrorism]]. ## Sources / Provenance - [NIST — Cyber Threat Information Sharing](https://csrc.nist.gov/pubs/sp/800/150/final)