Purpose

Explains Google Threat Intelligence (GTI) and its role in threat hunting and incident investigation.

Overview

Google Threat Intelligence provides curated intelligence, including IOCs, malware analysis, and threat actor context to support proactive and reactive security operations.

Authoritative Documentation

• https://gtidocs.virustotal.com/
  
• https://cloud.google.com/security/products/threat-intelligence
  

Support & Escalation

Compliance & Control Alignment (Informative)

This knowledge base article supports organizational awareness, documentation, and operational understanding related to security, risk, and service delivery. It may contribute to regulatory and compliance objectives depending on system design, deployment scope, and control implementation.

• ITSG-33 (Canada – GC / PBMM): PL-2, SA-9, SI-4, IR-1 / IR-4, AU-2 / AU-6

• CMMC (United States – DoD): SI.L2-3.14.1, IR.L2-3.6.1, AU.L2-3.3.1, RM.L2-3.11.1, CA.L2-3.12.1

• ISO/IEC 27001:2022: A.5.1, A.5.19, A.5.23, A.5.24, A.8.16

• FedRAMP (Moderate / High – Informative): PL-2, SA-9, SI-4, IR-4, AU-6

• NIS2 (EU): Article 21(2)(a), (b), (d), (e)

• DORA (EU – Financial Sector): Articles 5, 6, 10, 28
  

Important Note
This article does not constitute evidence of compliance, certification, authorization, or accreditation. Compliance outcomes depend on implemented controls, governance processes, and independent assessment results.