What is a primary capability of GenAI tools in threat intelligence?

• A. Provide new insights and detect previously missed threat alerts
• B. Replace all human analysts
• C. Eliminate data collection
• D. Create synthetic threats

Answer: (A)

GenAI tools in threat intelligence augment analysts by surfacing new insights and detecting threats that might be missed through manual review. They can ingest vast, diverse data—from internal logs to external feeds—and reason across it to reveal patterns, connections, and anomalies that are hard to spot at scale. They also produce prioritized, context-rich alerts and recommendations, helping analysts focus on the highest risks. This mix of finding new, actionable insights and catching previously overlooked threats explains why this option is the best fit. Replacing human analysts, eliminating data collection, or solely creating synthetic threats don’t capture the primary capability of GenAI in threat intelligence.