# IntelTwit - Poor Man's Threat Intel **URL:** \ **Category:** Elastic Community and Ecosystem\ **Created:** [March 30, 2018, 5:41am UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183 "2018-03-30T05:41:21Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Post date:** [March 30, 2018, 5:41am UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183/1 "2018-03-30T05:41:21Z")
This is the newest "fun" project I am working on. The twitter plugin can dump, literally, over 1,000 fields so I've narrowed it down to what I believe is the most relevant and then pulled some of those fields apart for different uses as well as field analysis to identify developing trends/threats. So far it's a pretty plain dashboard but I think it's good information. I'm going to try and integrate some additional API threat feeds to diversify. So, does anyone out there find this useful or am I just reinventing the wheel for something someone's already published? ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/5/15b73a0f82dbe7de774e07ef56b293b12f87b9db.png) ---
**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Post date:** [April 5, 2018, 5:44am UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183/2 "2018-04-05T05:44:31Z")
Added some geo-ip enrichment for WebIron Bots, refined some of the parsing and analyzer. Published to GitHub if anyone's interested in giving it a spin. > **[wwalker0307/IntelTwit](https://github.com/wwalker0307/IntelTwit)** > > IntelTwit - IT threat intelligence gathering via Twitter ---
**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Post date:** [April 5, 2018, 5:51am UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183/3 "2018-04-05T05:51:28Z")
Just realized I have this posted in the wrong sub-forum. Can a mod move it to the appropriate place, I believe that's the #Ecosystem forum. ---
**Author:** ![ankitsynX](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ankitsynx/32/64535_2.png) [@ankitsynX](https://discuss.elastic.co/u/ankitsynX)\ **Post date:** [April 14, 2020, 2:47pm UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183/4 "2020-04-14T14:47:11Z")
That's some awesome work there. Kudos! ---
**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Post date:** [April 14, 2020, 3:42pm UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183/5 "2020-04-14T15:42:07Z")
Thanks...though I haven't touched it in quite awhile, especially since Twitter required an application process to access the data. Hopefully it still works after getting that access, I may re-visit this again in the near future. I've learned quite a bit since then with the Elastic Stack so I may be able to do things in a better way or just more stuff in general. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 4, 2022, 5:18am UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183/6 "2022-11-04T05:18:45Z")