Get TI from historical breach data?
We can do more with breach data.
OSINT
Inference.
The way we leak information will eventually change...
A Method for identifying .onion associated IP addresses
This post is in theory, sound, however executing it would take real collaboration that probably doesn't exist and due to the benefits of tor to certain operations is going to be counterproductive,but, something to think about all the same