NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
OSINT & Threat Intel Sources
Master the art of gathering cyber intelligence. Explore Open-Source Intelligence (OSINT) methodologies, commercial threat feeds, dark web monitoring, and how to validate intelligence sources.
Room tasks
1What is OSINT in a SOC Context?
2VirusTotal Deep Dive
3AbuseIPDB & AlienVault OTX
4Introduction to MISP
5Building a Threat Intel Habit
Frequently Asked Questions
What is OSINT in threat intelligence?
OSINT is intelligence collected from public sources such as websites, social media, and registries. Analysts use it to understand threats, actors, and exposed assets.
What kinds of threat intelligence sources exist?
Sources include open feeds, commercial vendors, information sharing groups, internal telemetry, and dark web monitoring. Combining them gives a more reliable picture.
How do you use threat intel in a SOC?
Feed indicators into detections, enrich alerts, and brief teams on relevant actors. This free Codelivly room teaches how to collect and apply intelligence in practice.