The solution was used for publishing artefacts and threat intel data. We gathered data from the internet and uploaded it to the platform. It was integrated into every aspect of our cybersecurity network, like endpoints, SOC management, patch management, and vulnerability management tools.

I was doing research on this product by implementing a proof of concept.

It is used to help an operations team with the identification and resolution of threats in an automated, zero-touch fashion. Basically, it reduces the time to detect and repair any incident related to security. 

It is the security operations people or security engineers who use it.

I use it mainly for investigation. I have found it really useful to track and map threat actors. It can be used for balloting as well.

I use ThreatConnect to see what threats are coming in. I also use it to look at threats in the community.