Umbrella aggregates intelligence from multiple sources including open-source intelligence (OSINT), infrastructure telemetry hunting algorithms and Umbrella’s research on co-occurrences and related domain models. Intelligence includes indicators gathered from malware, IPs, domains, campaign research and threat actor developments.