Research path

Threat Intelligence

A focused view of OSINT4ALL tool profiles mapped to this investigation path.

26 mapped profiles No pay-to-rank ordering

Open filtered directory Browse collections

How to use this path

Start broad here, then narrow in the directory filters.
Open profiles for limits, pricing, and verification notes.
Use collections when you need a workflow stack, not one tool.

Official-page screenshot

Indiana University Observatory on Social Media

Source checked 2026-05-07

Claim and fact-check diffusion visualization for misinformation research

Verification: Pending Verification Workflow: Monitoring, Verification Pricing: Free

Best for: Visualizing how claims, rumors, and fact-checking content spread through public social-media signals.

Editorial

Tool profile

Hoaxy

Claim and fact-check diffusion visualization for misinformation research

WorkflowMonitoring, Verification AccessFree

Editorial

Open profile

Official-page screenshot

WhoisXML API

Source checked 2026-05-07

Domain, DNS, WHOIS, and threat intelligence APIs

Verification: Verification status not listed Workflow: Enrichment, Pivoting Pricing: Freemium

Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.

Editorial

Tool profile

WhoisXML API

Domain, DNS, WHOIS, and threat intelligence APIs

WorkflowEnrichment, Pivoting AccessFreemium

Editorial

Open profile

Repository screenshot

ninoseki

Source checked 2026-05-06

Browser extension for quick IOC and threat-intelligence pivots

Verification: Pending Verification Workflow: Enrichment, Pivoting Pricing: Free

Best for: Pivoting from domains, IPs, URLs, hashes, and CVEs into reputation and threat-intelligence sources during triage.

Editorial

Tool profile

Mitaka

Browser extension for quick IOC and threat-intelligence pivots

WorkflowEnrichment, Pivoting AccessFree

Editorial

Open profile

Editorial proof card

AbuseIPDB

Source checked 2026-05-07

IP abuse-report and reputation lookup service

Verification: Pending Verification Workflow: Enrichment, Verification Pricing: Freemium

Best for: Checking suspicious IP addresses against public abuse reports during security, exposure, and infrastructure triage.

Editorial

Tool profile

AbuseIPDB

IP abuse-report and reputation lookup service

WorkflowEnrichment, Verification AccessFreemium

Editorial

Open profile

Official-page screenshot

Nmap Project

Source checked 2026-05-07

Open-source network mapper for authorized exposure and service discovery

Verification: Pending Verification Workflow: Discovery, Verification Pricing: Free

Best for: Authorized network inventory, service discovery, exposure validation, and defensive technical assessment.

Editorial

Tool profile

Nmap

Open-source network mapper for authorized exposure and service discovery

WorkflowDiscovery, Verification AccessFree

Editorial

Open profile

Official-page screenshot

DomainTools

Source checked 2026-05-06

Commercial domain intelligence for WHOIS history and DNS pivots

Verification: Pending Verification Workflow: Enrichment, Pivoting Pricing: Freemium, Paid

Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.

Editorial

Tool profile

DomainTools

Commercial domain intelligence for WHOIS history and DNS pivots

WorkflowEnrichment, Pivoting AccessFreemium, Paid

Editorial

Open profile

Official-page screenshot

Google Cloud

Source checked 2026-05-27

Multi-source reputation context for indicators

Verification: Verification status not listed Workflow: Verification Pricing: Freemium

Best for: Quick reputation triage for suspicious URLs, domains, IPs, file hashes, and already-public malware or phishing indicators.

Editorial

Tool profile

VirusTotal

Multi-source reputation context for indicators

WorkflowVerification AccessFreemium

Editorial

Open profile

Official-page screenshot

GreyNoise

Source checked 2026-05-07

Background internet noise intelligence

Verification: Verification status not listed Workflow: Monitoring Pricing: Paid

Best for: Triage of suspicious IPs, scan activity, security alerts, and exposed-service noise where routine internet scanning may explain the…

GreyNoise

Background internet noise intelligence

WorkflowMonitoring AccessPaid

Weekly tool decisions, not another noisy list.