Abstract: A system for analyzing networks for potential vulnerabilities to cyber-attacks configured to (i) receive a plurality of indicators of compromise associated with active threat actors; (ii) generate a plurality of validation tests to test for the plurality of indicators of compromise; (iii) execute the plurality of validation tests in a simulation environment to generate a plurality of results; (iv) analyze the plurality of results to detect one or more failed validation tests of the plurality of validation tests; (v) scan a plurality of system and/or security logs of the computer network for indicators of compromise associated with the one or more failed validation tests; (vi) determine whether the computer network is compromised based on the scan of the plurality of system and/or security logs; and (vii) report threat posture information about a computer network and systems as a form of threat intelligence.