https://plumephp.com/tags/threat-intelligence/Recent content in Threat Intelligence on PlumePHPHugozh-CNSun, 27 Sep 2026 15:10:00 +0800https://plumephp.com/security-threat-intelligence/Sun, 27 Sep 2026 15:10:00 +0800https://plumephp.com/security-threat-intelligence/<h2 id="导语告警只说可疑情报才说是谁">导语：告警只说&quot;可疑&quot;，情报才说&quot;是谁&quot;</h2> <p>检测系统可以报告&quot;这台机器行为可疑&quot;，但很难回答&quot;是不是在针对我们&quot;&ldquo;是不是某个已知 APT&quot;&ldquo;它下一步会做什么&rdquo;——这需要<strong>威胁情报</strong>：关于攻击者意图、能力、手法、痕迹的知识。</p>