A threat intelligence team wants to automate the analysis and summary of its in-depth reports...

Using an LLM with retrieval-augmented generation and current data is the best solution because the requirement is to analyze substantial threat-intelligence material and generate tailored summaries for different audiences. CompTIA SecAI+ explicitly identifies document synthesis and summarization as an AI-assisted security automation use case and also includes retrieval-augmented generation as a core AI concept.

RAG enables the LLM to retrieve relevant information from an organization ' s current threat-intelligence repositories before generating its response. This improves factual grounding and allows reports to incorporate recent indicators, adversary information, vulnerabilities, campaigns, and internal findings that may not exist in the model ' s original training data. The LLM can then adapt the same underlying intelligence into executive summaries, analyst-level reports, or technical remediation guidance.

Sentiment analysis determines emotional or opinion-related characteristics and does not meet the summarization requirement. K-means clustering is useful for grouping similar observations but does not naturally generate audience-specific narrative reports. Regression predicts numerical values rather than synthesizing complex textual intelligence. Consequently, an LLM combined with RAG provides the strongest fit for automated, current, audience-aware threat-report analysis and summarization.