Attack Tactics • Room 2

Threat Intel Tiers

Threat Intelligence isn't just IP addresses. It spans three tiers:

1. Tactical (IOCs like IPs, hashes).

2. Operational (TTPs and adversary behavior).

3. Strategic (High-level trends and attribution for executives).

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

❤️❤️❤️

Question 1 of 1

Which tier of threat intelligence is most directly actionable for a Tier 1 Analyst writing SPL queries?

AStrategic Intelligence (e.g., Nation-state motivations).

BOperational Intelligence (e.g., General phishing campaigns).

CTactical Intelligence (e.g., Specific malicious IPs, domains, and file hashes).

DBusiness Intelligence (e.g., Quarterly earnings).