In this phase, an organization doesn't have a threat intelligence capability. 

The objective for level 1 initial phase is to identify a threat intelligence feed. 

So where do we begin? Let's start with finding feeds!

There are many feeds out there and the ones listed in the following section are some examples of where you can get threat intelligence.