CTI

CTI is analyzed information about threat actors, their capabilities, and their intentions. SOC and IR teams use CTI to prioritize defenses, enrich alerts with context, and hunt for adversaries known to target their industry. It matters because knowing who is likely to attack you and how lets you defend proactively instead of reactively.