Threat Intelligence
Feeds, platforms and tooling that collect, enrich and operationalise indicators and adversary tradecraft. Passive internet search stays in OSINT & Reconnaissance; SIEM and detection stay in Defensive Security & Monitoring.
VirusTotal
Online multi-engine scanner for analysing files, URLs, domains and IPs for malware signals, with free public and paid tiers.