Looking to see which threat intel feeds ya'll are using and how in all types of environments

We're weighing options with what threat feeds we ingest and wondering about pros/cons beyond what I've been able to research (meaning your stories). Would love to hear your strong opinions on what has and hasn't worked in different situations.

For context we are ingesting these currently for context based detections. So if something is present in a specific threat feed AND matches the known bad activity.

beyond cons context cybersecurity environments intel love opinions options research stories threat threat intel types