Threat intelligence level 1 is about building the collection capability of your organization. This level has four phases:

1. Initial
2. Phase A
3. Phase B
4. Phase C

The intent is to start from little to no intelligence gathering, to collecting large amounts of information, and to finally filtering out unnecessary information to prepare a more useful intelligence product for the organization.