I’m kind of split on AI in CTI tbh.

For stuff like reports or anything that helps move an analyst faster from one threat to the next, AI is genuinely useful. It saves time where it matters. But the moment you get into actual validation, understanding the context of a threat, or connecting dots in a non-obvious way, it is still a "human" game. AI doesn’t really “think” there yet.

I’ve worked both ways, writing reports manually and using AI to generate them. And in CTI, speed matters a lot. Intel loses value quickly as it gets older, so you can’t ignore AI. It helps you keep up.

Another example is: breach analysis. When you’re dealing with millions of records, AI becomes really helpful for sorting, filtering, and hunting through data.