CTI · OSINT
Threat Intel & Dark Web Monitoring
Turning IOCs, actor chatter and leaked data into intelligence a SOC can act on — passive and lawful only.
5
Deliverables
9
Tools
1
Attacks covered
What I deliver
- IOC enrichment with MISP, OpenCTI and VirusTotal
- Leak-site, forum and Telegram monitoring
- Leaked credential and data exposure alerts
- Threat actor and campaign tracking
- Intel reports mapped to MITRE ATT&CK
⟩ how I approach it
Step by step
- 01
Define assets, domains and VIPs to watch
- 02
Monitor leak sites, forums and Telegram (passive, lawful)
- 03
Verify and enrich every hit
- 04
Report with clear actions
- 05
Feed IOCs into the SOC
⟩ who it's for
Companies with public brandsBanks and fintechOrganisations after a data leak
⟩ real-world projects
Selected engagements
From my work at BERRY9 IT Services, as a freelancer, at CRIS InfoTech and Hacktr Technologies, and my own tools and research.
01
Freelance dark & deep web monitoring — leaked credentials, exposed data and threat-actor chatter targeting client organisations
02
Threat intelligence reports — IOCs enriched with MISP, VirusTotal and OSINT to support SOC triage and blocking
⟩ common vulnerabilities & how I find them
Top bugs I hunt — and the steps
The recurring weaknesses I see in this domain, with the repeatable workflow I run from discovery to fix.
- STEP 1Search breach and stealer-log sources for client domains
- STEP 2Verify freshness and which accounts are affected
- STEP 3Force resets and check for misuse
- STEP 4Add monitoring for repeats
⟩ arsenal
Tools & frameworks
MISP
Threat Intel Sharing
OpenCTI
Threat Intel Platform
AlienVault OTX
Threat Intel Feed
VirusTotal
File & URL Reputation
IntelligenceX
Leak Search
Have I Been Pwned
Breach Lookup
Maltego
OSINT Link Analysis
Tor Browser
Dark Web Access
Ahmia
Dark Web Search
⟩ engage
Need threat intel & dark web monitoring expertise?
⟩ related
More in Blue Team Operations
Purple Team Exercises
Runs red and blue side by side, technique by technique, so every gap turns into a shipped detection the same week.
SIEM Engineering
Designed scalable log pipelines and high-fidelity detections.
Malware Reverse Engineering
Unpacking and reversing ransomware, RATs, droppers and info-stealers to understand exactly what they do — and detect them.
Incident Response
Containment, eradication and recovery for active breaches.
Threat Hunting
Hypothesis-driven hunts using behavioral analytics.
EDR Management
Deployed and tuned EDR fleets across enterprises.