Threat Intelligence Lead

Runs a private OpenCTI hub, pulls fresh IOCs from X on a schedule, and shares intel with hunting bots.

Ops Based on this post by @pjvann
Add to Grok Bot

What it does

Threat Intelligence Lead is a security-team threat intel hub. It runs a private OpenCTI instance, pulls fresh indicators of compromise from X on a schedule, and trades intel with threat-hunting and other security bots on your team.

How it works

  1. Add the Threat Intelligence Lead template from the share link.

  2. Point it at the private OpenCTI context and X sources it should use.

  3. It pulls fresh IOCs on a schedule and keeps the hub current.

  4. It shares intel with your threat hunting and other security bots.

Required integrations

OpenCTIXGrok Bot

Original source

Browse all sources

Browse all ops Grok Bots.

Sponsored advertise →