Threat Intelligence Resources

Articles

CVSS Ratings in MATI
The Common Vulnerability Scoring System (CVSS) is an industry standard that is used to rate the potential severity of vulnerabilities. The National Vulnerability Database (NVD) is one source for CVSS assessments. For more information, see Vu...
Suspected Attribution
Threat activity that Mandiant Threat Intelligence assesses with full confidence to be attributed to a named APT (state sponsored), FIN (financially motivated), TEMP, or UNC group will be marked Mandiant Confirmed . In some cases, we have evidence t...
How does Mandiant track threat actors?
As we detect and uncover malicious activity, we group forensically related artifacts into "clusters." These clusters indicate actions, infrastructure, and malware that are all part of an intrusion, campaign, or series of activities which have direct...
How Your Threat Landscape Uses AI Recommendations
Mandiant has decades worth of threat intelligence data spanning a wide variety of contexts, including targeted locations and industry verticals. However, not every piece of that information is relevant to every customer. As a result, manual threat...
Threat Intelligence Reports
Mandiant Advantage Threat Intelligence (MATI) provides continuously updated reports and analysis of threat actors, campaigns, vulnerabilities, malware, and tools in the Reports & Analysis tab of the Threat Intelligence platform. Threat Intelligenc...