AaronCTI

Small update to ThreatLens for domain and brand monitoring:

- Brand imagery searches for logos and favicons for potentially fraudulent usage
- Exposed files/storage buckets across major providers
- Email notifications and daily/weekly digest now live

Only 300 ideas to go!!

For now just analysing how we could potentially use them for threat-informed defence but always open to ideas!

Enjoy our ruffling around the OSINT tools we noticed this week? We do this every week, but more importantly - We help organisations identify, understand and reduce their risk from their external attack surface. Want to know more about our ThreatLens platform? DM me, I don't bite

Workflow of the week - Set up Telespotter and do some OSINT!

HaGeZi DNS Blocklists - One for the CTI and SOC analysts or those more privacy conscious individuals.

ReconSpider - A classic? Either way recently updated and a great swiss army knife of an OSINT toolkit.

reconftw - Brings together a bunch of quality tools into one useful interface - Handy for website and infrastructure recon!

Telegram-OSINT - You'll never guess what platform this focuses on... You'll be utterly shocked!

Tookie - Look up social media accounts with this CLI-based tool. A nice addition to things like WhatsMyName or OSINT Industries.

This week first up is Telespotter, a Rust-based phone lookup tool. Worth adding to your arsenal if you do POI investigations!

It's that time of the week. OSINT Tool Thursday!!

We're today officially announcing the beta launch of ThreatLens! Our attack surface intelligence solution to help you cut through the noise and focus on the thing that actually matters. Your business.

OSINT-led, analyst-verified & human-written intelligence in plain English.

DM for more info!

At @perspectiveintel.bsky.social, we do this every day to track baddies, keep companies safe. We do this by leveraging ThreatLens, our frankly incredible OSINT-led attack surface intelligence capabilty. To quote Starship Troopers: Would you like to know more? Hit me up below!

Workflow of the week - Integrate active ransomware monitoring with RansomLook!

Metabigor - Quickly query websites without API credits you can pipe into tooling. Useful for analysts with limited tooling or API access.

deepdarkCTI - This incredible tool by @fastfire.bsky.social is an incredibly wonderful resource for all things cybercrime and dark web tracking.

Mitaka - Access over 50 different services to support an OSINT investigation with just one click. Yeah, me too bro.

RansomLook - Track ransomware activity with a locally hosted dashboard. Another useful one for CTI and SOC teams.

Redamon - More of a pentesting tool, but AI-enabled recon and exploitation - Useful for blue teams focusing on CTI and vulnerability management

First this week, WorldMonitor - News aggregation, monitoring and more in one dashboard.

It's time for OSINT Tool Thursday! What's been cooking this week? Let's take a look shall we? 👇

Spent 4 years building something wild.

What if you could see your business through a hacker's eyes before they strike?

We're launching beta access soon. Cybersecurity that actually makes sense for startups and small teams.

Want in?

I've made an important life decision...
I'm sending my AI to University!

Read their application: www.prompt.university/applications/app_oalwas79v2pf

Thanks #PromptUniversity, can't wait to read their research next week when class begins

GitHub - AaronCTI/OSM-Profile-Expander: Bookmarklet to automatically expand an OpenStreetMaps users contributions in full Bookmarklet to automatically expand an OpenStreetMaps users contributions in full - AaronCTI/OSM-Profile-Expander

Got sick of expanding a user profile on OpenStreetMaps forever and ever, so knocked up a bookmarklet to do it for me. You can find it here - github.com/AaronCTI/OSM... #OSINT

We're trying something new
@perspectiveintel.bsky.social.
A weekly look at OSINT tools we actually test: what changed, what's useful, what's hype.
Short. Opinionated. Human-tested.
Interested in a weekly roundup? Reply "yes" or drop tools we should cover first.

We use #OSINT every single day to help protect organisations and individuals safe from cybercrime (or indeed sometimes we try to catch the baddies). Want to learn more about what we're building? Hit me up!

Want a quick workflow you can use immediately with one of these tools? Here you go!

6. Sightline — github.com/ni5arga/sigh...
What it is: OSINT search engine for real‑world infrastructure using OpenStreetMap data.
What changed (this week):
• Enhance search with more asset types + autocomplete
• Cluster
Why it’s worth a look:
• Map infrastructure and pivot on locations/asset types.

5. maltego-telegram — github.com/vognik/malte...
What it is:
Transforms for investigating Telegram channels, groups, and users via public artefacts.
What changed (this week):
• remove limit
• add ProfileToGroup transform
Why it’s worth a look:
• Bring Telegram pivots into Maltego for link analysis.

4. urx — github.com/hahwul/urx
What it is: Extract URLs from archives to support historical pivots and investigation workflows.
What changed (this week):
• Update Goyo theme
Why it’s worth a look:
• Quick way to build a historical URL corpus for pivots/validation.