Which threat information type is a pattern that can be matched against low-level data to detect malicious network activities?

• A. Detection indicators
• B. Low-level data
• C. Advisories
• D. Strategic reports

Answer: (A)

Detecting malicious network activity relies on detection indicators, which are patterns security tools can search for and match against low-level data such as network traffic, logs, and telemetry. These indicators are concrete signals of compromise—things like known malicious IPs, file hashes, domain names, or distinctive traffic signatures—that, when found, trigger alerts in detection systems. They translate threat intelligence into actionable detections that can be applied in real time to spot intrusions. The other options describe broader data types or higher-level threat information rather than the specific patterns used to detect activity.