Resource Library

Threat Intelligence Resources for Security Teams

Research reports, case studies, product briefs, recorded sessions, and no-cost tools from Team Cymru, filterable by the problem you are solving.

Who
Threat hunters, SOC teams, and the security leaders who fund them.
What
Reports, eBooks, case studies, product briefs, webinars, and no-cost community tools.
How
Built on Team Cymru’s network visibility and two decades of community programs.

Browse the library

Reports, case studies, briefs, and tools

Narrow by content type, the problem you are solving, or the role you are in.

Pick a Category
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Voice of a Threat Hunter Report 2024 (Full)

Read More
eBooks
The full 2024 Voice of a Threat Hunter report on how hunting teams work, what they rely on, and where visibility breaks down.
Threat Hunting & Detection Engineering
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Real-Time Intelligence
Threat Hunter
CISO
All Verticals

Voice of a Threat Hunter Report 2024 (Short)

Read More
eBooks
The condensed edition of the 2024 Voice of a Threat Hunter report, with the headline findings in a quick read.
Threat Hunting & Detection Engineering
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Real-Time Intelligence
Threat Hunter
CISO
All Verticals

The CISO's Ultimate Guide to Threat Reconnaissance ROI

Read More
eBooks
How organizations reached a 488% ROI with proactive threat reconnaissance. A CISO guide backed by Forrester research.
Executive Strategy, Risk & ROI
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals

Voice of a Threat Hunter Report 2022

Read More
eBooks
The 2022 Voice of a Threat Hunter report on how threat hunters operate and the obstacles they face.
Threat Hunting & Detection Engineering
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Real-Time Intelligence
Threat Hunter
CISO
All Verticals

Nimbus Threat Monitor Video

Read More
Videos and Webinars
A short walkthrough of Nimbus Threat Monitor and the alerts it sends to network owners.
Real-Time Threat Detection & Signals
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Malicious Infrastructure
Compromised Hosts
SOC Analyst
SOC Manager
All Verticals

A Novel Approach: How Fortune 100 Companies have Turned the Tables on Threat Actors

Read More
Videos and Webinars
A recorded Federal Computing Week session on how Fortune 100 companies turned the tables on threat actors.
Executive Strategy, Risk & ROI
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Finished Intelligence Limitations
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals

Network Security Templates

Read More
Technology Resources
Open router and network configuration templates Team Cymru maintains for network operators.
Routing, DNS & Certificate Security
Malicious Infrastructure
Compromised Hosts
Threat Actor Infrastructure
Real-Time Intelligence
Visibility Gaps
Security Architect
Threat Intelligence Analyst
All Verticals

Analysing Ransomware Negotiations with CONTI

Read More
Research Papers and Analysis
Research into how the CONTI ransomware group ran its negotiations with victims.
Malware & Ransomware Analysis
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
All Verticals

Forrester Total Economic Impact Study Infographic

Read More
Infographics
The key findings of Forrester’s Total Economic Impact study of Pure Signal Recon, on one page.
Executive Strategy, Risk & ROI
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals

BwCsirt and Team Cymru Present Community Tools

Read More
Community Outreach Webinars
BwCsirt and Team Cymru walk through the no-cost community tools available to defenders.
Events, Conferences & Community Engagement
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Threat Intelligence Analyst
Broader Security Audience
All Verticals

Services communautaires gratuits et demonstration de Nimbus Threat Monitor (Francais)

Read More
Community Outreach Webinars
A French-language session on Team Cymru’s no-cost community services, with a Nimbus Threat Monitor demo.
Events, Conferences & Community Engagement
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Compromised Hosts
Threat Intelligence Analyst
Broader Security Audience
All Verticals

Learn How to Mitigate Cyber Threats - African Regional Webinar Demonstrating Our Community Tools

Read More
Community Outreach Webinars
A regional session for African network operators, hosting providers, and CSIRTs on Team Cymru’s no-cost community tools.
Events, Conferences & Community Engagement
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Threat Intelligence Analyst
Broader Security Audience
All Verticals

Dragon's Den Chat: Ohad Zaidenberg (CTI League)

Read More
Community Outreach Webinars
Ohad Zaidenberg on the CTI League and its pro bono help for healthcare defenders.
Events, Conferences & Community Engagement
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Threat Intelligence Analyst
Broader Security Audience
Healthcare

Dragon's Den Chat: Serge Droz (ProtonMail and FIRST)

Read More
Community Outreach Webinars
Serge Droz of ProtonMail and FIRST on incident response and the value of trusted communities.
Events, Conferences & Community Engagement
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Threat Intelligence Analyst
Broader Security Audience
All Verticals

Dragon's Den Chat: Barry Greene (Trust Groups and COVID19)

Read More
Community Outreach Webinars
Barry Greene on trust groups and how defender communities worked together during COVID-19.
Events, Conferences & Community Engagement
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Threat Intelligence Analyst
Broader Security Audience
All Verticals

Nimbus Threat Monitor

Read More
Community Outreach No-Cost Tools and Services
An overview of Nimbus Threat Monitor, Team Cymru’s no-cost service that alerts network owners to malicious activity on their networks.
Real-Time Threat Detection & Signals
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Compromised Hosts
SOC Analyst
SOC Manager
All Verticals

Pure Signal Recon Malware Module

Read More
Commercial Product Briefs
How the Recon Malware Module helps analysts trace malware to the infrastructure behind it.
Malware & Ransomware Analysis
Malware
Malicious Infrastructure
Ransomware
Botnets
C2 Infrastructure
Malware Researcher
Incident Responder
All Verticals

Zero Trust Augmentation with IP Reputation Feed

Read More
Commercial Product Briefs
How an IP reputation feed adds external threat context to a zero trust architecture.
Real-Time Threat Detection & Signals
Malicious Infrastructure
Real-Time Intelligence
Compromised Hosts
Preemptive Defense
Security Architect
SOC Manager
All Verticals

Pure Signal Recon

Read More
Commercial Product Briefs
An overview of Pure Signal Recon, Team Cymru’s platform for threat hunting and reconnaissance at internet scale.
Threat Hunting & Detection Engineering
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Threat Actor Infrastructure
C2 Infrastructure
Threat Hunter
Threat Intelligence Analyst
All Verticals

Threat investigations at a leading UK Bank paves the way towards proactive Cyber Defence

Read More
Case Studies
How a leading UK retail bank moved past outdated feeds to stay ahead of repeat attackers and supply chain compromises.
Fraud, Phishing & Supply Chain Risk
Real-Time Intelligence
Supply Chain Attacks
Third-Party Risk
Finished Intelligence Limitations
Phishing
Threat Intelligence Analyst
Chief Fraud Officer
Financial Services
Retail

How Financial Institutions Stay Ahead of Threat Management Using Pure Signal Recon

Read More
Case Studies
How a leading US financial institution got ahead of APTs, phishing campaigns, and supply chain compromises.
Fraud, Phishing & Supply Chain Risk
Phishing
APT
Supply Chain Attacks
Third-Party Risk
Malicious Infrastructure
Threat Intelligence Analyst
Chief Fraud Officer
Financial Services

What Elite Threat Hunters See That Others Can't

Read More
Case Studies
How elite threat hunting teams use internet-scale visibility to find infrastructure that other teams miss.
Threat Hunting & Detection Engineering
Proactive Threat Intelligence
Real-Time Intelligence
Visibility Gaps
Malicious Infrastructure
Preemptive Defense
Threat Hunter
Threat Intelligence Analyst
All Verticals

Achieving Financial Gain With A Proactive Security Posture Using Pure Signal Recon

Read More
Case Studies
How a Fortune 5 company with a vast supply chain tackled phishing, breach risk, and threats from compromised third parties.
Fraud, Phishing & Supply Chain Risk
Phishing
Compromised Hosts
Supply Chain Attacks
Third-Party Risk
Malicious Infrastructure
Chief Fraud Officer
Chief Risk Officer
All Verticals

Pure Signal Recon l Automation & API Integration

Read More
Technical Overview
How to automate Pure Signal Recon and connect it to your tools through its API.
Threat Hunting & Detection Engineering
Malicious Infrastructure
Real-Time Intelligence
Proactive Threat Intelligence
Threat Actor Infrastructure
C2 Infrastructure
Security Architect
Threat Hunter
All Verticals

Voice of the ‍Cybersecurity Strategist

Read More
eBooks
Benchmark your visibility, investment priorities, and strategy against today’s security leaders.
Executive Strategy, Risk & ROI
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals

Modernizing Security with Threat Reconnaissance Webinar

Read More
Videos and Webinars
A recorded session on how threat reconnaissance moves security teams from reacting to anticipating.
Threat Hunting & Detection Engineering
Real-Time Intelligence
Preemptive Defense
Exploitation
Proactive Threat Intelligence
Threat Actor Infrastructure
Threat Hunter
Threat Intelligence Analyst
All Verticals

Pure Signal Scout Product Guide

Read More
Commercial Product Briefs
A guide to Pure Signal Scout: what it shows about an IP or domain and how analysts use it in investigations.
Real-Time Threat Detection & Signals
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Malicious Infrastructure
Compromised Hosts
Threat Hunter
Threat Intelligence Analyst
All Verticals

Uncovering A Supply-Chain Attack: Leveraging Threat Intelligence for Incident Response and Threat Hunting Initiatives Webinar

Read More
Videos and Webinars
A recorded walkthrough of uncovering a supply chain attack with threat intelligence, from response to hunting.
Fraud, Phishing & Supply Chain Risk
Supply Chain Attacks
Compromised Hosts
Malicious Infrastructure
Threat Actor Infrastructure
Incident Responder
Threat Hunter
All Verticals

Removing the Fog of War: Tackling 3 Big Challenges for Security Teams Webinar

Read More
Videos and Webinars
A recorded session on three big challenges security teams face and how better visibility clears them up.
SOC Enablement & Intelligence Enrichment
Visibility Gaps
Finished Intelligence Limitations
Real-Time Intelligence
Proactive Threat Intelligence
SOC Manager
CISO
All Verticals

Forrester Total Economic Impact Study Webinar

Read More
Videos and Webinars
A recorded session on Forrester’s Total Economic Impact study of Pure Signal Recon.
Executive Strategy, Risk & ROI
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals

The Digital Risk Landscape: A Report on Top Financial Institutions & Third Party Risk

Read More
Research Papers and Analysis
A report on the digital risk and third-party exposure facing top financial institutions.
Fraud, Phishing & Supply Chain Risk
Third-Party Risk
Supply Chain Attacks
Visibility Gaps
Compromised Hosts
CISO
Chief Risk Officer
Financial Services