Signatures and pattern-matching rules supplied to analysis platforms as an automated feed.

Signatures and pattern-matching rules supplied to analysis platforms as an automated feed.

• A. Reputational threat intelligence
• B. cyber threat intelligence (CTI)
• C. threat feeds
• D. software bill of materials (SBOM)

Answer: (C)

Threat feeds are automated data streams that deliver indicators of compromise, detection signatures, and rule sets to security platforms so they can automatically detect known threats. When signatures and pattern-matching rules are provided as an automated feed to analysis platforms, it’s describing a threat feed—the mechanism that keeps detection engines up to date with the latest detection logic and patterns to look for in data, files, or network traffic. This is different from reputational threat intelligence, which focuses on the trustworthiness or maliciousness of entities like domains or IPs rather than the actual detection rules. It’s also broader than CTI, which covers contextual information about threat actors, campaigns, techniques, and vulnerabilities, not just the automated delivery of detection signatures. Finally, an SBOM lists software components and their dependencies, licenses, and supply-chain details, not security detection rules.

Threat feeds are automated data streams that deliver indicators of compromise, detection signatures, and rule sets to security platforms so they can automatically detect known threats. When signatures and pattern-matching rules are provided as an automated feed to analysis platforms, it’s describing a threat feed—the mechanism that keeps detection engines up to date with the latest detection logic and patterns to look for in data, files, or network traffic.

This is different from reputational threat intelligence, which focuses on the trustworthiness or maliciousness of entities like domains or IPs rather than the actual detection rules. It’s also broader than CTI, which covers contextual information about threat actors, campaigns, techniques, and vulnerabilities, not just the automated delivery of detection signatures. Finally, an SBOM lists software components and their dependencies, licenses, and supply-chain details, not security detection rules.