initial-access-brokers

Consolidate and update initial access broker intelligence with actor profiles and cited sources.

15|5|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/Liberty91LTD/cti-skills --skill initial-access-brokers
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: initial-access-brokers
Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/initial-access-brokers
Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill initial-access-brokers

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Knowledge cell that consolidates and continuously updates intelligence on initial access brokers to support threat research and defensive planning.

Core Features & Use Cases

  • Actor profiles: summaries of IAB actors, handles, and historical activity.
  • Marketplace dynamics: trends in listings, pricing, and sale channels.
  • Threat landscape mapping: timelines, notable incidents, and references for research.

Quick Start

Query the knowledge cell for the latest IAB activity and actor profiles.

Frequently Asked Questions about initial-access-brokers

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are initial access brokers and how do they operate in cybercrime marketplaces?

Initial access brokers are threat actors who sell unauthorized network entry points on cybercrime marketplaces. This knowledge base tracks their actor profiles, marketplace dynamics, and pricing trends to support threat intelligence and defensive planning.

How do I use threat intelligence for risk assessment against initial access brokers?

Use threat intelligence on initial access brokers for risk assessment by querying their historical activity and marketplace dynamics. This knowledge base provides actor profiles and cited sources to map the threat landscape and inform defense planning.

Can I integrate initial access broker intelligence into my incident response workflows?

You can integrate initial access broker intelligence into incident response workflows by querying this updatable knowledge base. It consolidates threat research notes, actor profiles, and historical events applicable to active threat hunting.

What is the best way to map threat landscapes using initial access broker marketplace dynamics?

The best way to map threat landscapes using initial access broker dynamics is analyzing marketplace trends, pricing, and sale channels. This knowledge base consolidates such dynamics alongside timelines and notable incidents for research.

Does this knowledge base provide cited sources for initial access broker actor profiles?

The knowledge base provides cited sources alongside initial access broker actor profiles, historical events, and marketplace dynamics. This ensures threat research and risk assessments are grounded in verifiable intelligence references.