5l1v3r1 Goto Github PK

threat-hunting-with-notebooks

Repository with Sample threat hunting notebooks on Security Event Log Data Sources

threat-intel

Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).

threat-intel-templates

A set of templates for documenting threat intelligence

threat-intelligence

收集的一些国外能提供提供威胁情报的公司，涵盖网络安全、工控安全、终端安全、移动安全等领域

threat-intelligence-1

threat-intelligence-analyst

威胁情报，恶意样本分析，开源Malware代码收集

threat-intelligence-data

Snort_rules detection bad actors.

threat-modeling-templates

Microsoft Threat Modeling Template files

threat-recognition

threataggregator

Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.

threatbox

ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of ansible playbooks. Why Ansible? Why not? This seemed a natural evolution.

threatbutt

Threatbutt python client and Maltego transforms

threatcentral-standardedition

威胁情报系统标准版本

threatcrawler

Vulnerability, exploit and malware RSS feed crawler and reporter.

threatcrowd-maltego

Maltego transforms for the ThreatCrowd search API

threatdetectionrules

威胁检测规则集

threatest

Threatest is a Go framework for end-to-end testing threat detection rules.

threatexchange

Share threat information with vetted partners

threatexpert-crawler

Script to crawl www.threatexpert.com to find results of malware by keyword.

threatfactor-nsia

threatglass-09-20-15

threathunt

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

threathunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

threathunting-1

Tools for hunting for threats.

threathunting-book

ATT&CK理解+sigma规则研究

threathunting-spl

Splunk code (SPL) useful for serious threat hunters.

threathuntingtools

WindowsEvents + Sysmon + ElasticSearch + Python

threatingestor

Extract and aggregate threat intelligence.

threatintelligencecorpus