Category using threat intelligence triage