How to Use Threat Desk: CTI Community Guide
Summary
The CTI - Cyber Threat Intelligence server provides a dedicated space for members to analyze the evolving threat landscape. This guide outlines how to contribute high-quality intelligence on active campaigns, ransomware, and vulnerabilities while maintaining TLP:CLEAR standards. By following these posting guidelines, members ensure that discussions remain actionable, professional, and valuable to the broader cybersecurity community.
threat-desk is where community members can discuss significant developments across the threat landscape.
Share and discuss things like:
- Active campaigns and emerging threats
- Threat actor activity
- Malware operations
- Ransomware and cybercrime
- Vulnerability exploitation
- Cloud and identity threats
- Supply-chain activity
- Notable threat intelligence reports
Tell us what happened, why it matters, and include a source when available.
Give your post a clear, descriptive title and select the most relevant tag. Avoid dropping links without context—briefly explain why the information is worth discussing.
Keep discussions appropriate for TLP:CLEAR. Defang potentially malicious URLs or domains when needed, and do not upload live malware or restricted information.
Specific requests for research or intelligence assistance belong in #intel-requests, and methodology, tooling, or analyst tradecraft discussions belong in #analyst-workbench.
