> For the complete documentation index, see [llms.txt](https://knowledge.whiteintel.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://knowledge.whiteintel.io/dark-web-intelligence/threat-feeds.md).
# Threat Feeds
Threat Feeds is the live intelligence stream. It aggregates dark web activity, indicators of compromise, threat-actor profiles, and related reporting into a single, continuously updated surface.
**Availability:** Full access to Threat Feeds and its detail views requires a Threat Intelligence subscription. Lower tiers see the module with an upgrade prompt.
### What it covers
Threat Feeds brings together several categories of intelligence:
* **Dark web chatter and mentions** — posts and discussions surfaced from monitored sources.
* **Indicators of compromise (IOCs)** — observed indicators with their technical context.
* **Threat actors** — profiles assembled for tracked actors.
* **Related reporting** — news and analysis tied to the above.
### Detail views
Selecting an item opens a detail sidebar appropriate to its type:
* Dark web chatter opens an intel detail view with the post content and, where available, screenshots in a lightbox.
* An IOC opens a technical detail view with its attributes, confidence, and associated context.
* A threat actor opens a profile view with the actor's status, first and last seen, and related findings.
These detail sidebars share a consistent layout and behavior with the rest of the platform.
### Subscription notice
Because Threat Feeds content is part of the Threat Intelligence tier, detail requests verify entitlement. When access is not included, the platform presents a blurred preview and an upgrade prompt rather than the full content.