{"repo":"7onez/cti-expert","free":true,"listed":false,"github":"https://github.com/7onez/cti-expert","clone":"git clone https://github.com/7onez/cti-expert.git","description":"CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code. 67+ commands, 35 techniques, no API keys required.","language":"Python","stars":486,"topics":["claude-code","claude-code-skill","cti","cyber-threat-intelligence","digital-forensics","investigation","osint","reconnaissance","security","threat-intelligence"],"license":null,"category":"security-tools","readme_excerpt":"CTI Expert Cyber Threat Intelligence & OSINT Analysis Toolkit Transform Claude into a trained intelligence analyst — 74+ commands, 49 techniques, zero API keys required for core functionality. Installation       View Demo       Quick Start       Commands       Contribute                       🇬🇧 English   ·  🇻🇳 Tiếng Việt   ·  🇨🇳 中文 Built by Hieu Ngo • hieu.ngo@chongluadao.vn • chongluadao.vn --- 🤝 Sponsors & Supporters CTI Expert is built in the open. These organisations back the work — with data, tooling, and hard-won investigative tradecraft.         Supporter What they bring In the toolkit ----------- ----------------- ---------------- Rexxfield Cybercrime investigation and victim-side casework since 2008 — the real-world tradecraft the case workflow and attribution standards are modelled on Tradecraft & methodology Hudson Rock Infostealer-infection intelligence — which machines leaked which credentials, and when /breach-deep · /stealer-log ParanoidLab Dark-web, Initial-Access-Broker and infostealer-log monitoring across forums, markets and private Telegram Dark-web collection & review ANY.RUN Interactive malware sandbox + TI Lookup — sandbox-observed C2 and real endpoints from packed samples /binary · /hash-id ZETAlytics Global passive DNS with rare g","default_branch":null,"files":null,"tree":[],"storefront":"/r/7onez","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/7onez/cti-expert/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}