{
  "technique_id": "T1681",
  "name": "Search Threat Vendor Data",
  "tactics": [
    "Reconnaissance"
  ],
  "platforms": [
    "PRE"
  ],
  "summary": "Threat actors may seek information/indicators from closed or open threat intelligence sources gathered about their own campaigns, as well as those conducted by other adversaries that may align with their target industries, capabilities/objectives, or other operational concerns. These reports may include descriptions of behavior, detailed breakdowns of attacks, atomic indicators such as malware hashes or IP addresses, timelines of a group’s activity, and more...",
  "generated_by": "SOC Response Atlas by Basyrix"
}