StudyToCert

All certifications / CySA+ / Lessons

CompTIA CySA+ CS0-004 · Domain 1: Security operations

Threat intelligence: actor types, TTPs, confidence (timeliness, relevancy, accuracy), open vs closed sources, ISACs, STIX/TAXII

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Threat intelligence is information about adversaries and their methods that has been collected, analyzed and put into context so defenders can make decisions. Raw data, such as a list of IP addresses, is not intelligence until someone evaluates it and connects it to your organization. Good intelligence answers practical questions: who is likely to target us, how do they operate, and what should we look for or fix first.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CySA+ for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CySA+ study plan