También: cti, cyber threat intelligence, threat intel

Collecting and analysing information about threat actors and their techniques. Covers IOCs and TTPs, MITRE ATT&CK mapping, intelligence feeds and platforms, and turning findings into detections.