Threat Intelligence Working Group

The Threat Intelligence Working Group will drive proactive cybersecurity by shaping how organizations will collect, analyze, and act on threat insights. Through collaborative research, operational best practices, and knowledge sharing, the group will empower members to anticipate emerging threats and outpace adversaries.Focus areas will include:

• Threat Intelligence Practices – Developing approaches for producing and operationalizing intelligence across strategic, operational, tactical, and technical levels.
• Data Fusion & Analysis – Combining internal telemetry with external sources to surface actionable threat patterns and adversary behaviors.
• Hunting & Threat Actor Alignment – Strengthening detection by integrating intelligence into proactive hunting and incident response workflows.
• AI, Automation, and Analyst Enablement – Enhancing intelligence processes with automation and AI, while recognizing the critical role of human expertise.
• Collaboration & Sharing Models – Building trusted frameworks for intelligence sharing and joint defense initiatives.
• Measuring Impact – Defining metrics to assess threat intelligence program maturity, responsiveness, and value to the business.