Cyber Threat Intelligence (CTI)

Cyber threat intelligence is knowledge, skills and experience-based information concerning the occurrence and assessment of both cyber and physical threats and threat actors that is intended to help mitigate potential attacks and harmful events occurring in cyberspace. Cyber threat intelligence sources include open source intelligence, social media intelligence, human Intelligence, technical intelligence, device log files, forensically acquired data or intelligence from the internet traffic and data derived for the deep and dark web. In recent years, threat intelligence has become a crucial part of companies' cyber security strategy since it allows companies to be more proactive in their approach and determine which threats represent the greatest risks to a business. This puts companies on a more proactive front - actively trying to find their vulnerabilities and prevents hacks before they happen.

Threat Feeds and Platforms

GitHub Repos and Mind Maps

Abuse.ch

Cyber Threat Intelligence Top Resources

  1. Open-source tools for Cyber Threat Intelligence (CTI)

  2. ETDA Thailand APT Groups + ETDA Thailand APT Tools

  3. Malware Analysis Insights - Adversaries

  4. SOS Intelligence

  5. MISP Galaxy

  6. Lockheed Martin Cyber Kill Chain®

  7. Vectr

CrowdStrike

Anomali

MITRE ATT&CK

Tidal Cyber

Groups

  1. SecureWorks Threat Profiles

  2. Palo Alto Networks Unit 42 Playbook Viewer

  3. Strangereal Intelligence - EternalLiberty

  4. Dragos Threat Groups

  5. Threat Group Cards (PDF)

ZoneFiles

Databases & Collections

  1. Adversary Monikers - EternalLiberty

  2. Campaign Monitor - APT CyberCriminal Campagin Collections

  3. Mapping APT attacks - Exploring APT Campaigns

  4. Adversary and Malware DB - Malpedia

  5. Kaspersky APT list - Securelist

  6. Cyber Operations Tracker - CFR

  7. Threat Actor Map

  8. APT WORLD MAP

  9. APT Groups and Operations - Google Sheets

  10. APT campaigns - Google Sheets

  11. Russian APT ecosystem

  12. National Security Archive - Kumu

  13. Open Source Tools used by APTs - Intezer

  14. APT Notes part I - GitHub

  15. APT Notes part II - GitHub

  16. APT Notes - GitHub

  17. RedDrip7 APT tools - GitHub

  18. RedDrip7 APT map - Qianxin Threat Intelligence Center

  19. Carnegie Endowment for International Peace - Special Projects

Intelligence Agency and Security Services Internal Structure

APT researchers on Twitter

CVEs / Exploits

Breaches

DarkWeb Resources

Malware Information Sharing Platform (MISP)

PreviousBlue Team & SOC AnalystNextBlue Team & SOC Analyst

Last updated