Threat Intelligence — التهديداتv1.0.1

Security teams monitor Arabic-language Telegram channels used by threat actors like Fatimion Cyber Team and 313 Team. The skill scrapes public channels, auto-translates Farsi/Hebrew mentions, and flags malicious posts in real time.

Analysts generate structured threat reports in Arabic and English for leadership or SOC teams. The skill consolidates data from tracked channels and dark web sources into a concise brief tailored to the Middle East region.

Organizations search for leaked credentials or company data on the dark web via Tor. The skill accepts Arabic or English queries and returns .onion links with risk assessments, helping breach notification workflows.

Security researchers scan Certificate Transparency logs for subdomains of target domains without active probing. The skill flags takeover candidates, dev/test servers, and admin panels for vulnerability management.

Analysts track Iran-linked groups like APT34/MuddyWater targeting telecom, energy, and government sectors. The skill provides region-specific intelligence (Middle East focus) for incident response preparedness.

Offer clients tailored Arabic and English threat reports and real-time Telegram alerts. Revenue from subscription fees based on number of monitored channels and report frequency.

Provide ongoing dark web scans for corporate clients seeking early breach detection. Revenue per scan or monthly retainer, with add-ons for multi-language support.

Release the skill as open-source (MIT) but charge for integration into enterprise SIEMs or custom dashboards. Revenue from consulting and support contracts for deployments.