What is Google Threat Intelligence?

Google Threat Intelligence is the combined threat intelligence offering that unifies insights from Mandiant's frontline incident-response intelligence, VirusTotal's massive file/URL reputation database, and Google's own broader threat research into one integrated source of context for Google SecOps.

Rather than requiring an analyst to separately check a suspicious IP or file hash against multiple disconnected tools, Google Threat Intelligence provides a unified verdict and score that aggregates signals from all three sources, which is surfaced directly within investigations and detections in Google SecOps to help prioritize which alerts genuinely warrant urgent attention.

It also includes a Gemini-powered research assistant within the threat intelligence experience specifically, letting analysts ask natural-language questions about a threat actor, campaign, or geopolitical topic and receive a distilled, plain-language summary drawn from Mandiant's underlying intelligence corpus, rather than needing to manually read through raw research reports.