## What is Cyber Threat Intelligence?\n\n**Cyber Threat Intelligence (CTI)** is evidence-based knowledge about existing or emerging threats to digital assets. It provides context, mechanisms, indicators, implications, and actionable advice.\n\n### The Data → Information → Intelligence Pyramid\n\n- **Data**: Raw, unprocessed facts (IP: 185.123.45.67)\n- **Information**: Processed, organized data with context (This IP is linked to Cobalt Strike C2)\n- **Intelligence**: Analyzed, actionable insight (This IP is part of APT29 campaign targeting healthcare. Your org is at risk. Patch VPN now.)\n\n> 💡 Raw data becomes intelligence only when analyzed, contextualized, and made actionable for a specific audience.