Internal intelligence feeds are derived from data and information collected within an organization's

own networks and systems. Jian's activities, such as real-time assessment of system activities and

acquiring feeds from honeynets, P2P monitoring, infrastructure, and application logs, fall under the

collection of internal intelligence feeds. These feeds are crucial for identifying potential threats and

vulnerabilities within the organization and form a fundamental part of a comprehensive threat

intelligence program. They contrast with external intelligence feeds, which are sourced from outside

the organization and include information on broader cyber threats, trends, and TTPs of threat actors.

Reference:

"Building an Intelligence-Led Security Program" by Allan Liska

"Threat Intelligence: Collecting, Analysing, Evaluating" by M-K. Lee,

L. Healey, and

P. A. Porras