All CTI & OSINT guides
In-depth guides on the tools and methods analysts use every day.
30 guides
Introduction to CTI
Concepts, intelligence cycle and first sources.
Read the guideCTIMITRE ATT&CK
Matrix, Navigator, TTP mapping and detection.
Read the guideCTIMISP
Events, attributes, taxonomies, galaxies and sharing.
Read the guideCTIInvestigation with MISP
Correlations, pivots, enrichment and export.
Read the guideCTIMISP – Advanced Features
Event Reports, workflows, decaying model and automation.
Read the guideCTIOpenCTI
Structure threat knowledge with STIX 2.1.
Read the guideCTITheHive
Incident management with TheHive and Cortex.
Read the guideCTIYARA
Write rules to detect malware.
Read the guideCTIShuffle SOAR
Automate security workflows.
Read the guideCTIAPT
Actors, motivations, TTPs and tracking of persistent threats.
Read the guideCTICTI Best Practices
Build and run a Threat Intelligence program.
Read the guideOSINTIntelligence X
Deep archives and data leaks.
Read the guideOSINTShodan
Map internet-exposed devices.
Read the guideOSINTCensys
Exposed hosts and certificates.
Read the guideOSINTMaltego
Link analysis for investigations.
Read the guideOSINTInvestigation with Maltego
A complete step-by-step investigation.
Read the guideOSINTtheHarvester
Emails, subdomains and hosts.
Read the guideOSINTSpiderFoot
Automate OSINT reconnaissance.
Read the guideOSINTRecon-ng
The modular reconnaissance framework.
Read the guideOSINTNmap
Network discovery, ports and services.
Read the guideOSINTSherlock
Find a username across hundreds of sites.
Read the guideOSINTOSINT Industries
Accounts linked to an email or phone number.
Read the guideOSINTExifTool
Extract file metadata.
Read the guideOSINTMetagoofil
Metadata from public documents.
Read the guideOSINTFOCA
Hidden information in documents.
Read the guideOSINTBellingcat
The reference open source investigation methods.
Read the guideOSINTIntelTechniques
Michael Bazzell’s tools and resources.
Read the guideOSINTOSINT Framework
Find the right tool at the right time.
Read the guideOSINTAircrack-ng
Audit WiFi network security.
Read the guideGeneralBest Practices
Essential habits of CTI and OSINT analysts.
Read the guide
Ready to put it into practice?
CyberXTEL is our free platform to train hands-on: certifications, CTFs and a dedicated cyber awareness space.