The "known unknowns" stage in cyber-threat intelligence refers to the phase where an analyst has

identified threats but the specific details, implications, or full nature of these threats are not yet fully

understood. Michael, in this scenario, has obtained information on threats and is in the process of

analyzing this information to understand the nature of the threats better. This stage involves

analyzing the known data to uncover additional insights and fill in the gaps in understanding, thereby

transitioning the "unknowns" into "knowns." This phase is critical in threat intelligence as it helps in

developing actionable intelligence by deepening the understanding of the threats faced.

Reference:

"Intelligence Analysis: A Target-Centric Approach," by Robert M. Clark

"Structured Analytic Techniques for Intelligence Analysis," by Richards J. Heuer Jr. and Randolph H.

Pherson