Abstract: A method includes receiving, at a security platform, a plurality of threat indicators associated with current intrusive activities with respect to computing resources of a first entity and receiving, at the security platform, a plurality of threat datasets associated with prior intrusive activities with respect to computing resources associated with one or more entities including the first entity. The method further includes receiving, at the security platform, a plurality of environmental datasets associated with the computing resources of the first entity and determining an alert level associated with a first threat indicator of the plurality of threat indicators based on the plurality of threat datasets and the plurality of environmental datasets. The method further includes generating, responsive to the alert level satisfying an alert threshold criterion, an alert associated with the first threat indicator for one or more users of the first entity.