# What is threat intelligence?

Threat intelligence is information about attackers and their methods that helps you defend yourself: known malicious addresses and domains, file fingerprints, descriptions of active campaigns and which industries they target. It comes from security vendors, national CSIRTs, industry groups and public feeds. It is most useful when it is current and relevant to you; a list of a million old addresses mostly produces noise. For a small company, the practical form is usually built into the tools you already have, plus alerts from your national CSIRT about vulnerabilities being exploited. It complements, but does not replace, watching your own network.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-threat-intelligence

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What is an attack surface?](https://netsenx.com/en/faq/what-is-an-attack-surface)
- [What is a threat actor?](https://netsenx.com/en/faq/what-is-a-threat-actor)
- [What is an APT (advanced persistent threat)?](https://netsenx.com/en/faq/what-is-an-apt)
- [What are false positives and false negatives?](https://netsenx.com/en/faq/what-are-false-positives-and-false-negatives)
- [What is a SOC (security operations centre)?](https://netsenx.com/en/faq/what-is-a-soc-security-operations-centre)