Most of the major security vendors have also invested heavily in teams and technologies that collect, correlate, deconstruct, and build responses to threats. These teams often gather live threat intelligence from thousands, or even millions of their own devices distributed around the world. These threat research engineers also develop and use advanced technologies, combined with the sometimes tedious work of hands-on reverse engineering and analysis, to understand threat trends and tactics of the cybercriminal community. That information is then loaded directly into the devices of their customers to keep them safe from live threats.
Full Article.