Skill UI

Use OSINT sources, Maltego/SpiderFoot, and STIX data to gather open‑source intelligence, map adversary infrastructure and TTPs, and deliver structured threat actor dossiers for proactive defense.

Collects and synthesizes passive OSINT about threat actors, malicious infrastructure, and attack campaigns using sources like Maltego, Shodan, SpiderFoot, and security registries to support phishing investigations, infrastructure reconnaissance, or enrichment of CTI profiles.

Automate OSINT collection with SpiderFoot's REST API and CLI to run scans, select modules for footprinting, monitor progress, parse domains/IPs/emails, and build structured threat profiles from 200+ data sources.