Skip to content

Threat Intelligence

Know who is behind the threat — and who it touches.

Build sourced dossiers on threat actors, follow their campaigns, review attributions and publish reviewed intelligence products — all connected to the incidents on the Global Risk Map and to your own sites.

Actor dossier — “IRON TIDE” is a fictional demonstration group

Actors & campaigns

Dossiers built on evidence, not assumptions

Every statement in a dossier carries its source, whether it was observed or assessed, and a confidence level. Relationships between actors, campaigns and organizations are typed and evidence-backed.

  • Actor registry and dossiersProfiles, tactics, indicators and watchlists, with a sourced reference library to start from.
  • Campaign trackingGroup activity into campaigns and link them to the incidents they produced.
  • Attribution reviewAttributions of incidents to actors go through review before they count.
app.thehighground.io

Relationship graph — fictional actors and campaign

Capabilities

From raw reporting to a finished product

Linked to the mapOperational

Incidents associated with an actor or campaign, and those near your assets, are one click away.

Client relevanceOperational

See which actors are active where your sites and people are.

Intelligence productsOperational

Draft, peer-review and publish products to the right audience.

Watchlists and indicatorsOperational

Track indicators and watched entities across collection.

Requirements and collection assignmentsOperational

Manage intelligence requirements and who is collecting against them.

External threat-intelligence feedsPlanned

Commercial and community feeds are catalogued in the integrations registry but not connected.

Ready to see Highground in action?

Gain a global advantage

Discover how Highground can support your organization's intelligence, security, and operational risk management needs.