Threat Intelligence Platforms (TIPs) aggregate, normalize, enrich, and operationalize external threat data — indicators of compromise (IOCs), adversary tactics-techniques-and-procedures (TTPs), dark-web monitoring, vulnerability intelligence, and brand-exposure data — and feed it into detection, hunting, and response workflows. Core capabilities include multi-source feed ingestion, IOC deduplication and confidence scoring, MITRE ATT&CK mapping, threat-actor and campaign tracking, integration APIs that push enrichment into SIEM/SOAR/EDR, and analyst workflow support for threat research. Leading vendors include Mandiant (Google), Recorded Future, Flashpoint, Anomali, ThreatConnect, and EclecticIQ.