Activities of collecting, analyzing, and using information about threats, malicious actors, attack campaigns, and vulnerabilities to support proactive defense decisions. Includes Cyber Threat Intelligence (CTI), Threat Hunting, analysis of Indicators of Compromise (IoC), OSINT applied to security, intelligence on APTs and ransomware groups, and integration of threat intelligence feeds into SOC and detection platforms.