Question 165
Main Page
A threat intelligence platform (TIP) provides greatest value when:
A. It replaces antivirus
B. It collects logs
C. It enriches events and feeds indicators into your detection workflows
D. It scans user credentials
Answer: It enriches events and feeds indicators into your detection workflows
TIPs are designed to enhance detection by integrating threat context into response and SIEM correlation.