Threat intelligence gathering (THIN) (Level 3) Performs routine threat intelligence gathering tasks. Interprets detected security threats to identify actionable insights.