Google Threat Intelligence (GTI) score overview

Supported in:

Google secops SIEM

Note: Earlier versions of Applied Threat Intelligence (ATI) use the IC-score from Mandiant. The Google Threat Intelligence score fully replaces the IC-score for ATI use cases.

The Google Threat Intelligence (GTI) score system helps Google Security Operations prioritize and address the most significant security threats. GTI score calculates threat levels for various indicators, including, domains, IP addresses, file hashes and URLs.

The GTI score is a numeric representation (from 0-100) of an indicator's potential impact if detected in an environment. The scoring system combines Mandiant Threat Intelligence data with analyst expertise to determine the score.

For more details about GTI score, see Google Threat Intelligence Indicatore Score.

Need more help? Get answers from Community members and Google SecOps professionals.