CTI Blueprints

Project Summary

Published : Jun 7, 2023

This project developed an approach and prototype tool for creating narrative cyber threat intel reports that analysts need in the form they need them. Reports produced using CTI Blueprints include structured STIX content, are tagged with ATT&CK reference, and enable operational defensive cyber analysis, analytics testing, and adversary emulation. We will establish a new normal for cyber threat intelligence. Producers will create actionable intelligence for their consumers, and consumers will take specific threat-informed action. 


Threat intel producers need clear and concrete guidance and tools to create finished intelligence that meet defenders’ needs. 


Answer defenders’ critical questions through actionable intelligence reports created from expert-developed templates that reflect defenders’ use cases.


Threat intelligence producers create actionable intelligence that their users can operationalize immediately. 

Funding Research Participants

Leadership Spotlight: 
Collaborative Leadership Driving Innovation


Hear directly from research participants about this project and why it matters. Learn how these leaders are changing the game on the adversary.

Share This Project

Stay Informed

Stay informed about new releases of R&D projects and other exciting updates from the Center for Threat-Informed Defense.