OSINT toolkit tracks Iran Israel conflict as DDoS signals emerge

The SOCRadar blog piece tracks the U.S.-Israel-Iran war through an OSINT toolkit, launched with the claim that open-source intelligence enables researchers to observe real-time signals without classified access. It highlights a multi-tool stack, including World Monitor for live conflict reports, the SOCRadar Iran-Israel Cyber Conflict Dashboard for cyber activity, Conflictly for geographic mapping, and Pizzint Watch for signals from Telegram.

The guide notes that Iran’s internet connectivity collapsed to about 4% of normal levels following the February 28, 2026 kinetic actions, with hacktivist activity spilling into Telegram channels in the first 72 hours. It also lists specific hacktivist groups observed in early March 2026, such as Cyber Islamic Resistance, DieNet, NoName057(16), and Z-Pentest Alliance, with the latter accused of publishing HMI access screenshots; claims about DDoS and intrusions are framed as signals rather than proven outcomes.

The piece emphasises cross-checking claims across tools, corroborating airspace signals with aircraft trackers, and verifying cyber claims before sharing, concluding that cyber operations unfold in tandem with kinetic strikes. It was published on 5 March 2026.