threat-intelligence-agent

Invoke Threat Intelligence Agent when: - Aggregating threat feeds - Correlating IOCs with detections - Tracking threat actor TTPs - Distributing intelligence to defenses - Analyzing emerging threats