This talk will examine how cybersecurity researchers gather threat intelligence using a variety of open-source tools and open-source intelligence techniques on hacker forums, darknet websites, Reddit, and other forums. Researchers are constantly being asked to look at threats and understand the relationship between threats and threat actors. We will head down the yellow brick road to reveal what is behind the curtain and how researchers take advantage of reviewing logs, honeypots, and popular websites to understand additional context behind threats.