Threat Report

---
title: Threat Report
description: Threat Reports are collections of threat intelligence focused on one or more topics. Threat reports apply for STIX 2.x.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/threat-report.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [threat report, STIX report, threat intelligence report]
breadcrumb: [Threat Entities, TISC Library Repository, Threat Intel Library, Use, Threat Intelligence Security Center, Security Operations]
---

# Threat Report

Threat Reports are collections of threat intelligence focused on one or more topics. Threat reports apply for STIX 2.x.

Threat reports include description of a threat actor, malware, attack technique, including context and related details. They are used to group-related threat intelligence together so that it can be published as a comprehensive cyber threat story.

The Threat Report SDO contains a list of references to STIX Objects along with a textual description and the name of the report.

-   **[Define Threat Report](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/define-threat-report.md)**  
Define threat reports that describe a threat actor, malware, attack technique, including context and related details.

**Parent Topic:**[Threat Entities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-threat-entities.md)