Threat intelligence is very important nowadays. However, for a CISO it is very hard to actually understand the differences between one intelligence report and another. A valuable APT report can sometimes influence how security teams will function during an incident response and these report’s action items are not to be found with a Google search. In this talk, Ido Naor, a seasoned researcher and a principal in one of the leading security companies in the world, Kaspersky Lab, will dive into APT reports, their structure, action items, differences and how to spot the not when choosing your threat intelligence vendor.