Threat intelligence
in the real world.

Check indicators in context, respect sharing rules and separate observed behaviour from attribution.