What is threat intelligence in email?

Threat intelligence is information about current and emerging email threats: active **phishing** campaigns, malicious infrastructure, attack techniques, and indicators of compromise. Intelligence informs defensive decisions.

Sources include: security vendors, industry sharing groups, government agencies, open-source intelligence, and internal detection. Aggregating multiple sources provides broader coverage.

Application: intelligence feeds into filters (blocking known threats), guides investigation (contextualizing incidents), and informs strategy (understanding threat landscape). Timely, relevant intelligence improves defense.