Skills tagged "threat-intelligence"

performing-dark-web-monitoring-for-threats - Perform dark web monitoring to identify threats
threat-intelligence dark-web tor cti
★ 18 · Updated 2026-09-22
Systematically scans Tor hidden services, paste sites, and ransomware leak sites to identify leaked credentials and threats targeting organizations.
⚙ Set up Tor HTTP client ⚙ Verify Tor proxy connection ⚙ Monitor paste sites for credential leaks
cybersec-processing-stix-taxii-feeds - Process STIX 2.1 threat intelligence feeds via TAXII 2.1
cybersecurity stix taxii threat-intelligence
★ 1 · Updated 2026-09-17
Ingests, validates, normalizes, and routes STIX 2.1 threat intelligence bundles from TAXII 2.1 servers to target platforms.
⚙ Discover TAXII server collections ⚙ Fetch STIX bundles with pagination ⚙ Parse and validate STIX objects
scan-cyber-threats - Retrieve active cyber threat intelligence and vulnerabilities
cybersecurity threat-intelligence ioc c2
★ 0 · Updated 2026-09-13
Retrieves active cyber-threat intelligence including malware IOCs, C2 infrastructure, and CISA known-exploited vulnerabilities.
⚙ Retrieve cyber threat intelligence ⚙ Filter threat indicators by source ⚙ Filter threats by severity level
monitoring-darkweb-sources - Monitor Dark Web Sources for Threat Intelligence
cybersecurity threat-intelligence dark-web OSINT
★ 24 · Updated 2026-06-30
Monitors dark web forums, paste sites, and ransomware leak sites for organizational asset mentions and leaked credentials
⚙ configure monitoring keywords ⚙ monitor dark web forums ⚙ monitor paste sites
triaging-security-alerts-in-splunk - Triaging Security Alerts in Splunk ES
soc siem splunk alert-triage
★ 4 · Updated 2026-05-09
Classifies severity, investigates notable events, correlates telemetry, and makes triage decisions in Splunk Enterprise Security
⚙ access incident review dashboard ⚙ prioritize notable events ⚙ investigate event context