This is Anton Chuvakin original blog (pre-Gartner) that I will now use to backup my Medium blog content (2023+)
newly seen badness and other novel stuff is definitely the domain of anomaly detection and other algorithmic methods, not threat intelligence, IMHO
Originally published at Medium.