monitoring-darkweb-sources - Monitor Dark Web Sources for Threat Intelligence
Monitors dark web forums, paste sites, and ransomware leak sites for organizational asset mentions and leaked credentials
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- configure monitoring keywords
- monitor dark web forums
- monitor paste sites
- investigate ransomware sites
- monitor credential exposure
- document findings
- classify severity
- notify stakeholders
Inputs
- Commercial dark web monitoring service
- Isolated operational environment
- Keyword watchlist
- Legal authorization
Outputs
- Threat intelligence alerts
- Evidence screenshots
- Investigation logs
- Severity classification
- Stakeholder notifications
- Investigation tickets
Requirements
- Commercial CTI platform access
- Tor browser connectivity
- Isolated VM environment
- Investigation authorization
