Dictionary · Defensive Security

Analyzed information about threats, including who is active and which indicators matter, produced so a defender can make a specific decision.

A raw list of addresses is data. Intelligence says why it matters to you and what to do. If it does not change a decision, it is just a feed.

Example: A report ties a phishing domain to a campaign that targets the company's industry, so mail filtering blocks that domain the same day.