Threat intel acted on or disclosed is often threat intel lost - so how to balance long term collection with immediate needs? I tried exploring this a bit a few years ago… a discussion that I should do a deeper dive into. https://youtu.be/Cuhs4EJqxMw?is=rhsw3FnyToMIgZIY