Threat intelligence level 1 is about building the collection capability of your organization. This level has four phases:
- Initial
- Phase A
- Phase B
- Phase C
The intent is to start from little to no intelligence gathering, to collecting large amounts of information, and to finally filtering out unnecessary information to prepare a more useful intelligence product for the organization.