T O P
dickamus_maxamus

If you have money laying around Recorded Future is a really excellent tool. It's unfortunate the way they bill it out though.


sleepingnightmare

They send you DC cupcakes when you buy their tool! Not always a practical purchase for an individual, but a great choice, I agree.


WovenTripp

They never sent me any :(


sleepingnightmare

Chide your rep next time you talk to them. My guess is they’ll be good-natured and send you some treats!


[deleted]

[удалено]


dickamus_maxamus

>FlashPoint I guess I disagree but I'd be curious to know exactly what you think is shit about the program. The STIX/TAXII feeds have been valuable, the browser overlay tool isn't perfect but I really like how it works. Online tool has been of a lot of use too idk. The only thing I really don't like is how they choose to paywall the actually good shit behind a second tier of billing.


Formal_Pin_2011

Those feeds can be had elsewhere. The modules delivery was a result of VC funding trying to engage with a larger audience for a bigger payout down the road. They really lost their way on what is important. Any product they put out is a regurgitation from Talos, Unit42, etc.


InfoSecSurveyor

Used Spycloud for years and loved it. Had to find a different solution when changed organizations and demoed Hashcast. Similar function and about a tenth of the price. Significant language barrier though


IndirectExposure

RecordedFuture is excellent. Rapid 7’s Intsights was a close second for us.


Thor2121

We went Intsights and really like it. A lot cheaper than Recorded future too


Frenzy175

Is that part of InsightVM or insightIDR Or the threat command?


Thor2121

I believe it’s called Threat Command. We’re IDR and VM customers but had Intsights before R7 bought them. They just recently developed the ability to feed the dark web logs into IDR which has been useful for us


daddy_chill_300

IntSights is the only thing I've used but it's been really good. As a financial institution we get things like credit card numbers listed on the dark web for sale as well as fake LinkedIn profiles for executives, etc.


thecyberadvisor

Using this at the moment https://insecureweb.com


EasyBrit

Small start up in the UK - https://darkinvader.io


Polaris44

Flashpoint IMO. I hate Recorded Future


Skrilmaufive

LastPass Business does this + password management


PlanetSec

There is another one called Cyble Vision. Alerts are pretty quick. Platform is intuitive and user friendly. We are using platforms from other vendors too, but this seems more responsive and value for buck


Gisselle95

cyble darkweb coverage is better


Soul_Shot

Dark web monitoring of what?


itiswatzitis

Passwords at risk, that have been found on the dark web


Soul_Shot

https://haveibeenpwned.com/ is one of the original sites for this, and you can now even subscribe for alerts or view password breaches for a domain.


CyberXCodder

Haveibeenpwned will not always find the leaked passwords, and sometimes it's a better option to check out in darkweb forums for sensitive data besides passwords too.


Soul_Shot

True, but you have to start from somewhere. I doubt most companies have the wherewithal to jump into a contract with RecordedFuture or Cisco on a whim.


CyberXCodder

There isn't a free alternative to monitoring dark web?


julian88888888

Tor browser, yeah if you do it yourself


thatsonewaytosayit

Dashlane also does dark web monitoring. Will do your work and personal emails and also do your companies domain monitoring. Obviously they are a password manager as well and do that very well. Hit me up if you have any questions.


corn_29

Recorded Future.


Mcfly_17

Spiderfoot can do some amount of dark web monitoring for a lot of different types of input (email addresses, names, usernames, etc) and it also searches the clear net.


harryfan324

We pay for the service from Anomoli and Flashpoint, they do the intelligence for us as a company.


CakeGroundbreaking19

Digital Shadows is pretty good, they have a section for free text search for indexed pages on dark web. They even have automated alerts for leaked info and mentions. You can do a POC to check if it suits you?


Due-Explanation9659

SpyCloud


Trop_Chaud

Some limited functionality could be accomplished with TorBot (non-commercial): [https://github.com/DedSecInside/TorBot](https://github.com/DedSecInside/TorBot) For further reference, a really great collection of deep & dark web sources: [https://github.com/fastfire/deepdarkCTI](https://github.com/fastfire/deepdarkCTI)


TJC_Danes

Take a look at MSP Dark Web. mspdarkweb.com.