📚 Help — gdelt
Live global news/event monitor (GDELT, no key). Search by topic and country for geopolitical signal.
📕 Getting Started
- Run the DB upgrades in order:
upgrade-db.php→ v3 → v4 → v5 → v6 → v7 → v8. - Seed reference data: countries, sources, world borders.
- Ingest: Auto-Collect or Import.
- Resolve locally: Resolve Everything.
- Automate: schedule
cron.php(collect→ingest→resolve→enrich→score→alert). - Operate: Platforms Hub, Copilot, AI Skills.
📚 Tradecraft Glossary
OSINT — Open-source intelligence
GEOINT — Geospatial intelligence
SIGINT — Signals intelligence
HUMINT — Human intelligence
FININT — Financial intelligence
SOCMINT — Social-media intelligence
TECHINT — Technical intelligence
AIS — Automated Indicator Sharing (CISA)
STIX — Structured Threat Info Expression
TAXII — CTI transport protocol
IoC — Indicator of Compromise
TTP — Tactics, Techniques & Procedures
APT — Advanced Persistent Threat
🔌 Source Catalog
IP Blocklists (305) IP Reputation (25) Phishing (13) C2 Attribution (10) Sanctions (9) CERT Advisories (8) Vulnerabilities (8) APT/IoC (8) OSINT (8) Domains/URLs (7) Ransomware (5) Malware Attribution (5) Cryptocurrency (5) Malware Hashes (4) Malware URLs (4) Adverse Media (3) Tor (3) Scam (3) Crypto: Blockchain Explorer (3) Malware Domains (3) Court Cases (2) Maritime (2) Threat Actors (2) Crypto Sanctions (2) Nation State (2) Armed Conflict (2) C2 Certificates (2) Malware Families (2) ATT&CK Actors (2) Ransomware Actors (2) Corporate Registry (2) Crypto: Crypto Phishing (2) Proxy/Anon (2) Wanted (2) ATT&CK (1) Crypto: Ransom Payments (1) Vuln Mapping (1) Crypto: Crypto Fraud (1) Framework (1) Aviation (1) Disinformation (1) Refugee/Migration (1) Vulnerability (1) Corporate/Legal (1) Crypto: Crypto Sanctions (1) ICS ATT&CK (1) Ransom Payments (1) Crypto: Crypto Attribution (1) Environmental (1) PEP Screening (1) Wildlife Crime (1) Crypto Fraud (1) Mobile ATT&CK (1) Humanitarian (1) Malware IPs (1) Threat Reports (1)
Add more via Seed Sources.
🗃 Data Dictionary (43 tables)
| Table | Approx rows |
|---|---|
activity_log | 119 |
alerts | 0 |
api_keys | 1 |
asn_contacts | 0 |
attack_groups | 176 |
attack_software | 825 |
attack_techniques | 697 |
attribution_map | 2.8M |
campaigns | 23 |
crypto_attribution | 18 |
cve_intel | 1.6K |
detection_rules | 0 |
dns_records | 909 |
enrichments | 97 |
entity_links | 19.7K |
feed_registry | 489 |
human_security | 397 |
indicators | 1.1M |
indicator_sources | 2.3M |
indicator_tags | 318.3K |
ingest_queue | 0 |
intel_disciplines | 0 |
ip_dataset_imports | 0 |
ip_ranges | 0 |
job_runs | 1 |
kv_cache | 62 |
legal_requests | 0 |
mission_domains | 0 |
net_log | 888 |
platform_log | 242 |
ransomware_victims | 103 |
sanctions | 20 |
saved_searches | 0 |
settings | 29 |
sources | 285 |
source_catalog | 21 |
statistics | 1 |
tags | 49 |
tip_reports | 250 |
triage_state | 0 |
watchlists | 5 |
watchlist_items | 5 |
website_tech | 0 |
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron