Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he re

Strategic threat intelligence provides high-level, contextual analysis of threats and risks that informs organizational decision-making and security posture. It is gathered from diverse sources including human intelligence, open-source data such as social media and forums, and post-incident analysis of cyberattacks. The deliverable - a report identifying malicious activities, recommending courses of action, and warning of emerging attacks - is characteristic of strategic intelligence that guides leadership and policy rather than immediate technical response.

Tactical threat intelligence focuses specifically on the tactics, techniques, and procedures (TTPs) used by adversaries to tune defensive controls, rather than the broad risk-disclosure reports and organizational recommendations described in the scenario.

Operational threat intelligence covers specific, imminent attack campaigns including details such as target, timing, and attack methods, which is narrower and more time-sensitive than the organization-wide contextual risk analysis Arnold compiled.

Technical threat intelligence consists of specific indicators of compromise such as malicious IP addresses, file hashes, and domains used for detection and blocking, rather than the contextual, human-sourced risk analysis described in the scenario.