Threat intelligence identification method and device and storage medium

The invention discloses a threat intelligence identification method and device and a storage medium. The threat intelligence identification method comprises the following steps: acquiring real-time threat intelligence information; the real-time threat intelligence information is input into a trained large language model, an invaded index is output, and the trained large language model is obtained through training of user-defined cue words, an original large language model and historical threat intelligence information; and pushing the invaded index and the corresponding real-time threat intelligence information to a network security analyst. According to the embodiment of the invention, the collected real-time threat intelligence information is marked based on the trained large language model, and the invaded indexes in the real-time threat intelligence are pushed to the network security analyst in real time, so that the threat intelligence library is perfected, and the threat intelligence can be accurately a