What is deepdarkcti?

deepdarkCTI is a curated collection of sources from the deep web and dark web that are relevant to Cyber Threat Intelligence work. Cyber Threat Intelligence, often called CTI, is the practice of gathering and analyzing information about potential threats so that organizations can better prepare for and respond to cyberattacks. This repository serves as a directory of those information sources rather than being a software tool itself. The sources tracked by the project span a wide range of online spaces where threat actors and cybercriminals operate, including Telegram channels, Discord servers, ransomware gang websites, criminal forums, data leak sites, marketplaces, exploit databases, and social media accounts. The goal is to give security researchers and analysts a single reference point for monitoring where threat-related activity and intelligence information tend to surface. The project includes a file called "methods" that describes techniques for searching and analyzing these sources, which can help practitioners who are newer to dark-web-based research understand how to approach the material. Contributors to the project and active CTI professionals can request access to a private Telegram group where new sources are proposed and research methods are discussed. There is also an official website at deepdarkcti.com. The project accepts donations, and the maintainer states those funds will be used transparently and exclusively for resources related to the project. Contributions of new sources can be submitted through the GitHub repository. This is primarily a research reference collection rather than a software application, so there is no code to install or run.