Threat Intelligence Lead
Runs a private OpenCTI hub, pulls fresh IOCs from X on a schedule, and shares intel with hunting bots.
What it does
Threat Intelligence Lead is a security-team threat intel hub. It runs a private OpenCTI instance, pulls fresh indicators of compromise from X on a schedule, and trades intel with threat-hunting and other security bots on your team.
How it works
-
Add the Threat Intelligence Lead template from the share link.
-
Point it at the private OpenCTI context and X sources it should use.
-
It pulls fresh IOCs on a schedule and keeps the hub current.
-
It shares intel with your threat hunting and other security bots.
Required integrations
Original source
Browse all sourcesBrowse all ops Grok Bots.
Sponsored advertise →