CTI Collection & Sources
Cyber Takedown Services: Process, Evidence, and Metrics
Learn how cyber takedown services investigate, report, escalate, and measure disruption of phishing sites, malicious domains, and impersonation.
Category
CTI Collection & Sources
Methods for finding, evaluating, corroborating, and governing Cyber Threat Intelligence sources.
11 resources
Resources in this category
Browse all resources
CTI Collection & Sources
Responsible OSINT Collection
Plan public-source research with clear authority, minimization, researcher safety, provenance, retention, and escalation boundaries.
CTI Collection & Sources
Traffic Distribution Systems in Cybercrime
Analyze traffic distribution systems as conditional routing layers without confusing dual-use technology, infrastructure, and criminal operations.
CTI Collection & Sources
Cloud Threat Intelligence: How to Prioritize Identity, Control Plane, and Workload Signals
A practical method for turning cloud telemetry and threat reporting into prioritized intelligence about identities, control-plane activity, workloads, and business impact.
CTI Collection & Sources
Regional and Language Coverage in CTI: How to Find Your Blind Spots
Decide where language and regional collection matter, measure source imbalance, and build coverage that reflects your actual operations and suppliers.
CTI Collection & Sources
How to Verify a Cyber Threat Claim Before You Act or Share It
Trace online claims, screenshots, copied reports, and social posts to evidence, test context and independence, and choose a proportionate response.
CTI Collection & Sources
Dark Web Monitoring: When It Helps, What It Misses, and How to Decide
Decide whether dark web monitoring fits a real intelligence requirement, and define safe collection, validation, escalation, and service expectations.
CTI Collection & Sources
Passive DNS and WHOIS in CTI: What Can You Safely Conclude?
Use historical DNS and registration data for discovery and corroboration without mistaking co-location, privacy services, or stale records for shared control.
CTI Collection & Sources
How to Evaluate a Commercial Threat Intelligence Feed Before You Buy
Run a decision-based trial that tests unique coverage, relevance, timeliness, provenance, integration effort, and measurable operational value.
CTI Collection & Sources
How to Build an OSINT Collection Plan for Cyber Threat Intelligence
Convert an intelligence requirement into lawful, safe, source-specific OSINT tasks with validation rules, stop conditions, and a clear owner.