implementing-threat-intelligence-lifecycle-management - Implement Threat Intelligence Lifecycle Management
Implement a structured threat intelligence lifecycle covering planning, collection, processing, analysis, dissemination, and feedback.
Tags
Updated: 2026-10-01threat intelligenceintelligence lifecycleintelligence cyclecollectionanalysisdisseminationstrategic intelligenceCTI program
Capabilities
What this skill does
- Define intelligence requirements
- Map requirements to sources
- Collect threat intelligence
- Normalize collected data
- Deduplicate intelligence records
- Enrich and score indicators
- Analyze threat context
- Disseminate intelligence products
- Collect stakeholder feedback
- Track lifecycle metrics
Inputs
- Intelligence requirements
- Collection source configuration
- Threat feed credentials
- Organizational telemetry
- Stakeholder information
- Output file path
Outputs
- Intelligence requirements file
- Collected intelligence records
- Actionable intelligence products
- Collection summaries
- Distribution metrics
- Lifecycle status updates
Requirements
- Python 3.9 or later
- pymisp library
- stix2 library
- requests library
- pandas library
- MISP or OpenCTI platform
- Jira or ServiceNow system
- Splunk or Elastic SIEM
- Intelligence analysis knowledge