threat-intelligence
ZHCyber threat reports backed by public evidence.
What it does
Builds evidence-backed cyber threat intelligence reports with reproducible queries, preserved sources, and clearly qualified findings.
When to use it
Use for authorized public-source investigations of indicators of compromise, malicious campaigns, impersonation, scams, or threat actors.
How to use it
Give it a scoped threat intelligence question; it returns a report and source list with corroboration status, confidence, and evidence gaps.
What you provide
- target entities
- time window
- result limit
Uses
What you need · 6
Enables public X/Twitter searches and post or account reads through remote HTTPS and OAuth; the dependency table marks it as not required.
Hands detection or blocking recommendations to threat-hunting with false-positive analysis and offers a handoff for detection hypotheses; installation is not stated as required.
Access · 2
This skill
Xquik
Searches public X posts
MCP client configuration
Registers the Xquik MCP endpoint