AI Campaigns
Related IOCs clustered into daily campaign narratives by AI
AI Campaigns
Daily AI-clustered campaign narratives
TweetFeed clusters related IOCs shared over the last 7 days into campaign narratives using AI: shared infrastructure, malware family, TTPs and targeted brand are grouped together so you see the bigger picture instead of scrolling isolated indicators one by one.
Generated daily by AI from the last 7 days of community IOCs.
Frequently asked questions
What is an AI campaign on TweetFeed?
A campaign groups multiple IOCs reported by the community that AI detects as belonging to the same underlying operation - shared infrastructure, malware family, or targeted brand - seen over the last 7 days. Instead of scrolling isolated indicators one by one, you see the cluster as a single narrative.
How is campaign confidence calculated?
Confidence (high, medium, low) reflects how strongly related the underlying IOCs are. Shared registrable domains, matching tags and overlapping reporters raise confidence; loosely related indicators lower it. Treat low-confidence campaigns as a lead to verify, not a verdict.
How often is the campaign data refreshed?
Campaigns are recomputed daily from a rolling 7-day window of TweetFeed IOCs. If a generation run fails, this page shows a stale-data warning and falls back to the last successful snapshot.
Where does the underlying IOC data come from?
The same source as the rest of TweetFeed: indicators of compromise shared publicly by infosec researchers on Twitter/X, deduplicated and published every 15 minutes. Campaign clustering is an AI layer on top of that same feed.