KPMG’s threat intelligence team had a well-established data collection process, yet analysts spent long hours piecing together threat indicators, validating context and tracing attacks back to specific threat actors. Investigations progressed, but the effort required often meant extended analyst workloads during active engagement cycles. Solution A custom AI model was trained on the existing threat repository and was introduced as a chatbot within the intelligence platform. Analysts now query the system in plain language and receive relevant context, suggested links between attacks, sandboxing13 results and guidance on tracing attacks back to specific threat actors. The model supports forensic investigations, incident response, red team scenario design using mapped tactics, techniques and procedures (TTPs) and rapid intelligence reporting. When required, a controlled fallback enables external AI-assisted research with cited sources.