Threat intelligence

Intelligence is information that changes a decision. Anything else is a subscription.

Plenty of organisations buy feeds that arrive, get ingested and never alter what anybody does. The test is simple and worth applying: name something you did differently because of it. Blocked something, hunted for something, reprioritised something. If nothing comes to mind, the feed is a cost rather than a capability, however good the underlying research may be.