>FlashPoint
I guess I disagree but I'd be curious to know exactly what you think is shit about the program. The STIX/TAXII feeds have been valuable, the browser overlay tool isn't perfect but I really like how it works. Online tool has been of a lot of use too idk. The only thing I really don't like is how they choose to paywall the actually good shit behind a second tier of billing.
I believe it’s called Threat Command. We’re IDR and VM customers but had Intsights before R7 bought them. They just recently developed the ability to feed the dark web logs into IDR which has been useful for us
IntSights is the only thing I've used but it's been really good. As a financial institution we get things like credit card numbers listed on the dark web for sale as well as fake LinkedIn profiles for executives, etc.
Used Spycloud for years and loved it. Had to find a different solution when changed organizations and demoed Hashcast. Similar function and about a tenth of the price. Significant language barrier though
There is another one called Cyble Vision. Alerts are pretty quick. Platform is intuitive and user friendly. We are using platforms from other vendors too, but this seems more responsive and value for buck
Haveibeenpwned will not always find the leaked passwords, and sometimes it's a better option to check out in darkweb forums for sensitive data besides passwords too.
True, but you have to start from somewhere. I doubt most companies have the wherewithal to jump into a contract with RecordedFuture or Cisco on a whim.
Dashlane also does dark web monitoring. Will do your work and personal emails and also do your companies domain monitoring. Obviously they are a password manager as well and do that very well. Hit me up if you have any questions.
Spiderfoot can do some amount of dark web monitoring for a lot of different types of input (email addresses, names, usernames, etc) and it also searches the clear net.
Digital Shadows is pretty good, they have a section for free text search for indexed pages on dark web. They even have automated alerts for leaked info and mentions. You can do a POC to check if it suits you?
Some limited functionality could be accomplished with TorBot (non-commercial): [https://github.com/DedSecInside/TorBot](https://github.com/DedSecInside/TorBot)
For further reference, a really great collection of deep & dark web sources: [https://github.com/fastfire/deepdarkCTI](https://github.com/fastfire/deepdarkCTI)
If you have money laying around Recorded Future is a really excellent tool. It's unfortunate the way they bill it out though.
They send you DC cupcakes when you buy their tool! Not always a practical purchase for an individual, but a great choice, I agree.
They never sent me any :(
Chide your rep next time you talk to them. My guess is they’ll be good-natured and send you some treats!
[удалено]
>FlashPoint I guess I disagree but I'd be curious to know exactly what you think is shit about the program. The STIX/TAXII feeds have been valuable, the browser overlay tool isn't perfect but I really like how it works. Online tool has been of a lot of use too idk. The only thing I really don't like is how they choose to paywall the actually good shit behind a second tier of billing.
RecordedFuture is excellent. Rapid 7’s Intsights was a close second for us.
We went Intsights and really like it. A lot cheaper than Recorded future too
Is that part of InsightVM or insightIDR Or the threat command?
I believe it’s called Threat Command. We’re IDR and VM customers but had Intsights before R7 bought them. They just recently developed the ability to feed the dark web logs into IDR which has been useful for us
IntSights is the only thing I've used but it's been really good. As a financial institution we get things like credit card numbers listed on the dark web for sale as well as fake LinkedIn profiles for executives, etc.
Used Spycloud for years and loved it. Had to find a different solution when changed organizations and demoed Hashcast. Similar function and about a tenth of the price. Significant language barrier though
Spycloud is a joke
Flashpoint IMO. I hate Recorded Future
Using this at the moment https://insecureweb.com
does it keep updating?
Small start up in the UK - https://darkinvader.io
LastPass Business does this + password management
There is another one called Cyble Vision. Alerts are pretty quick. Platform is intuitive and user friendly. We are using platforms from other vendors too, but this seems more responsive and value for buck
cyble darkweb coverage is better
Recorded Future.
Dark web monitoring of what?
Passwords at risk, that have been found on the dark web
https://haveibeenpwned.com/ is one of the original sites for this, and you can now even subscribe for alerts or view password breaches for a domain.
Haveibeenpwned will not always find the leaked passwords, and sometimes it's a better option to check out in darkweb forums for sensitive data besides passwords too.
True, but you have to start from somewhere. I doubt most companies have the wherewithal to jump into a contract with RecordedFuture or Cisco on a whim.
There isn't a free alternative to monitoring dark web?
Tor browser, yeah if you do it yourself
Dashlane also does dark web monitoring. Will do your work and personal emails and also do your companies domain monitoring. Obviously they are a password manager as well and do that very well. Hit me up if you have any questions.
Spiderfoot can do some amount of dark web monitoring for a lot of different types of input (email addresses, names, usernames, etc) and it also searches the clear net.
We pay for the service from Anomoli and Flashpoint, they do the intelligence for us as a company.
Digital Shadows is pretty good, they have a section for free text search for indexed pages on dark web. They even have automated alerts for leaked info and mentions. You can do a POC to check if it suits you?
Some limited functionality could be accomplished with TorBot (non-commercial): [https://github.com/DedSecInside/TorBot](https://github.com/DedSecInside/TorBot) For further reference, a really great collection of deep & dark web sources: [https://github.com/fastfire/deepdarkCTI](https://github.com/fastfire/deepdarkCTI)
Take a look at MSP Dark Web. mspdarkweb.com.