Signature-based detection method used to identify actors, tools, and CVEs in threat intelligence data.