An ISAC bulletin describes a campaign expected against U.S. water utilities over the next quarter and lists likely TTPs. Which intelligence tier is that for the city's water SOC?
Select an answer to reveal the explanation.
Short Explanation
A quarter-long campaign with likely plays is the game plan, not the season recap and not a single jersey number. That is operational intel: window, target sector, TTPs to plan against. A lone hash is technical; a board white paper is strategic.
Full Explanation
Operational intelligence describes a campaign in a defined time window, including likely TTPs against a sector such as US water utilities. Strategic intel is broader leadership context, not a next-quarter campaign packet, while technical intel is indicator-level (IPs, domains, hashes). An ES annotation is detection metadata that does not fire notables by itself. The water SOC should turn that operational bulletin into coverage and hunt priorities for the quarter, not treat it as a board essay or a single hash.