NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
Intelligence Sources and Collection Methods
Know the source types CTI teams use, collect within legal and ethical limits, and grade sources with the Admiralty system.
Room tasks
1Intelligence Source Types
2Internal Telemetry and Commercial Feeds
3ISACs, Sharing Communities and Government Sources
4Legal and Ethical Limits of Collection
5Source Reliability and Information Credibility: the Admiralty System
6Lab: Build a Source Evaluation Matrix
Frequently Asked Questions
What are common CTI sources?
Typical sources include internal logs and incidents, open sources, commercial feeds, information sharing communities and technical data like malware samples. Good teams combine several and weigh their reliability.
How do you grade source reliability?
Rate the source's track record and the credibility of the specific information, ideally on separate scales. Corroborating with independent sources raises confidence in the result.
Are there legal limits to intelligence collection?
Yes. Laws and ethics restrict methods such as unauthorized access or deceptive contact. The Codelivly sources room is free and beginner-friendly, covering how to collect within those limits.