Topic: threatintel Goto Github

👇 Here are 217 public repositories matching this topic...

0xsha / sweetie-data
threatintel,This repo contains logstash of various honeypots
User: 0xsha
data-science dataset honeypot logstash malware-research samples threat-intelligence threat-modeling threatintel

annsec / awesome-cybersecurity
threatintel,Curated list of awesome cybersecurity companies and solutions.
Organization: annsec
cybersecurity siem malware threatintel security

bushidouk / cti-analyst-challenge
threatintel,An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.
User: bushidouk
Home Page: https://blog.bushidotoken.net/2024/06/the-cti-analyst-challenge.html
cti cyberthreatintelligence threatintel training workshop

bushidouk / open-source-tools-for-cti
threatintel,Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers
User: bushidouk
cti cybersecurity threatintel osint malware infosec

bushidouk / ransomware-tool-matrix
threatintel,A resource containing all the tools each ransomware gangs uses
User: bushidouk
Home Page: https://blog.bushidotoken.net/2024/08/the-ransomware-tool-matrix.html
cti cybersecurity detection-engineering hacking osint ransomware threat-hunting threat-intelligence threatintel

cloudtracer / threatpinchlookup
threatintel,Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
User: cloudtracer
Home Page: https://chrome.google.com/webstore/detail/threatpinch-lookup/ljdgplocfnmnofbhpkjclbefmjoikgke
passivetotal cve osint threatintel threat-hunting chrome-extension security virustotal threatminer circl

cowrie / cowrie
threatintel,Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io
Organization: cowrie
Home Page: https://www.cowrie.org/
attacker cowrie cowrie-ssh deception decoy honeypot kippo scp security sftp ssh telnet telnet-honeypot threat-analysis threat-sharing threatintel

criticalpathsecurity / zeek-intelligence-feeds
threatintel,Zeek-Formatted Threat Intelligence Feeds
Organization: criticalpathsecurity
threat-intelligence threatintel zeek zeek-ids malware phishing

csirtgadgets / bearded-avenger
threatintel,CIF v3 -- the fastest way to consume threat intelligence
Organization: csirtgadgets
Home Page: https://csirtgadgets.com/collective-intelligence-framework
security threatintel threat-hunting threat-sharing cif cifv3

curated-intel / log4shell-iocs
threatintel,A collection of intelligence about Log4Shell and its exploitation activity.
Organization: curated-intel
log4j log4j2 log4shell ioc ttp cve-2021-44228 java cti threatintelligence threatintel

docintelapp / docintel
threatintel,Open Source Platform for storing, organizing, and searching documents related to cyber threats
Organization: docintelapp
Home Page: https://docintel.org
cti cybersecurity intelligence security threat-hunting threat-intelligence threatintel information-security threat-intelligence-platform

drb-ra / c2intelfeeds
threatintel,Automatically created C2 Feeds
User: drb-ra
iocs indicators-of-compromise threat-intelligence threatintel threat-hunting poshc2 metasploit empire cobaltstrike cobalt-strike

eclecticiq / opentaxii
threatintel,TAXII server implementation in Python from EclecticIQ
Organization: eclecticiq
taxii stix cti python taxii-server threatintel threat-sharing cyber-threat-intelligence

fhightower / ioc-finder
threatintel,Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/
User: fhightower
indicators-of-compromise threat-intelligence threat-hunting threat-sharing grammar-parser threatintel cidr-range ipv4 iocs ioc-finder

graylog2 / graylog-plugin-threatintel
threatintel,Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
Organization: graylog2
graylog threat otx whois-information abuse graylog-plugin threatintel threat-score threat-analysis spamhaus

hack-with-github / powerful-plugins
threatintel,Powerful plugins and add-ons for hackers
Organization: hack-with-github
burpsuite firefox ida immunity ollydbg osint threatintel volatility-framework

huntdownproject / hednsextractor
threatintel,A suite for hunting suspicious targets, expose domains and phishing discovery
Organization: huntdownproject
Home Page: https://huntdownproject.github.io/
threat-hunting threat-intelligence threatintel adversarial-attacks malware-analysis phishing-detection

inquest / iocextract
threatintel,Defanged Indicator of Compromise (IOC) Extractor.
Organization: inquest
Home Page: https://inquest.readthedocs.io/projects/iocextract/
ioc indicators-of-compromise library ioc-extractor defang threat-intelligence threat-sharing threatintel malware-research osint

inquest / threatingestor
threatintel,Extract and aggregate threat intelligence.
Organization: inquest
Home Page: https://inquest.readthedocs.io/projects/threatingestor/
ioc indicators-of-compromise threatintel threat-intelligence osint dfir malware-research security-tools threat-sharing threat-feeds

intelowlproject / intelowl
threatintel,IntelOwl: manage your Threat Intelligence at scale
Organization: intelowlproject
Home Page: https://intelowlproject.github.io
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python

malwaresamples / malware-feed
threatintel,Bringing you the best of the worst files on the Internet.
User: malwaresamples
Home Page: https://www.virussamples.com
malware viruses virus-scanning malware-analysis malware-research malware-detection malware-samples virustotal threatintel threat-hunting

misp / misp
threatintel,MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Organization: misp
Home Page: https://www.misp-project.org/
misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti

misp / misp-dashboard
threatintel,A live dashboard for a real-time overview of threat intelligence from MISP instances
Organization: misp
misp cybersecurity cyber-security threatintel threat-intelligence dashboard

misp / misp-training
threatintel,MISP trainings, threat intel and information sharing training materials with source code
Organization: misp
osint misp-training threat-intelligence threatintel information-sharing information-exchange

misp / pymisp
threatintel,Python library using the MISP Rest API
Organization: misp
misp api api-client threat-sharing threatintel

mxm0z / awesome-intelligence-writing
threatintel,Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc
User: mxm0z
intelligence writing threatintel awesome awesome-list cyber-threat-intelligence intelligence-analysis reporting threat-intelligence threat-reports

netevert / dnsmorph
threatintel,Domain name permutation engine written in Go
User: netevert
permutation-algorithms permutations domains dns golang go typosquatting phishing phishing-attacks phishing-sites

nshalabi / sysmontools
threatintel,Utilities for Sysmon
User: nshalabi
sysmon threatintel sysinternals threat-hunting windows netsec monitoring logging threat-intelligence

nullarray / intrec-pack
threatintel,Intelligence and Reconnaissance Package/Bundle installer.
User: nullarray
automation bash enumeration install-script installer linux osint pentest pentesting recon reconnaissance security security-tools threatintel

opencybersecurityalliance / kestrel-lang
threatintel,Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
Organization: opencybersecurityalliance
hacktoberfest security threat-hunting language cybersecurity security-automation security-tools threat threat-intelligence threatintel

opencybersecurityalliance / stix-shifter
threatintel,This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
Organization: opencybersecurityalliance
Home Page: https://stix-shifter.readthedocs.io
hacktoberfest python stix2 stix cybersecurity security security-automation security-tools threat threat-hunting threat-intelligence threatintel ocsf

opensourcesec / forager
threatintel,Multithreaded threat Intelligence gathering built with Python3
Organization: opensourcesec
carbonblack python threatintel

osintbrazuca / osint-brazuca
threatintel,Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.
User: osintbrazuca
osint brasil hacking threat-intelligence threat-hunting threatintel

patrowl / patrowlhears
threatintel,PatrowlHears - Vulnerability Intelligence Center / Exploits
Organization: patrowl
Home Page: https://patrowlhears.io
soc vulnerabilities vulnerability-detection exploits exploits-scripts automation patrowl threat threat-intelligence threatintel

prodaft / malware-ioc
threatintel,This repository contains indicators of compromise (IOCs) of our various investigations.
Organization: prodaft
Home Page: https://www.prodaft.com/resources/latest-reports
cybersecurity ioc malware-detection malware-research ransomware threat-hunting threat-intelligence threatintel ttp apt

ransomlook / ransomlook
threatintel,Yet another Ransomware gang tracker
Organization: ransomlook
Home Page: https://www.ransomlook.io
cti ransomware threat-intelligence threatintel ransomlook

rshipp / awesome-malware-analysis
threatintel,Defund the Police.
User: rshipp
Home Page: https://blacklivesmatters.carrd.co/#donate
malware-analysis awesome awesome-list list malware-samples analysis-framework dynamic-analysis static-analysis threat-intelligence automated-analysis

smicallef / spiderfoot
threatintel,SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
User: smicallef
Home Page: http://www.spiderfoot.net
footprinting osint threatintel python infosec intelligence-gathering osint-reconnaissance pentesting threat-intelligence security-tools

soulsec / resource-threat-hunting
threatintel,Repository resource for threat hunter
Organization: soulsec
threat threat-hunting threat-intelligence threatintel

swiftonsecurity / sysmon-config
threatintel,Sysmon configuration file template with default high-quality event tracing
User: swiftonsecurity
sysmon threatintel threat-hunting sysinternals windows netsec monitoring logging

t4d / stalkphish
threatintel,StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
User: t4d
phishing phishing-sites threat-intelligence threat-hunting threatintel fraud-detection osint investigation phishing-kit scammers infosec

te-k / harpoon
threatintel,CLI tool for open source and threat intelligence
User: te-k
Home Page: https://www.randhome.io/blog/2018/02/23/harpoon-an-osint-/-threat-intelligence-tool/
osint osint-framework threatintel threat-intelligence

tenzir / threatbus
threatintel,🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
Organization: tenzir
Home Page: https://docs.tenzir.com/threatbus
threat-intelligence threatintel threat-hunting ids zeek misp opencti opencti-connector sightings threat-bus

thehive-project / hippocampe
threatintel,Threat Feed Aggregation, Made Easy
Organization: thehive-project
Home Page: https://thehive-project.org
threat-score threatintel feed intel aggregator python thehive open-source free free-software

toolswatch / vfeed
threatintel,The Correlated CVE Vulnerability And Threat Intelligence Database API
User: toolswatch
Home Page: https://vfeed.io
cve oval threat-intelligence-database python vfeed cwe capec scap vulnerability-databases vulnerability-detection

unknownhad / cloudintel
threatintel,This repo contains IOC, malware and malware analysis associated with Public cloud
User: unknownhad
Home Page: https://cloudintel.info/
aws azure exploit gcp malware-analysis security threat-intelligence threatintel

visualbasic6 / chatter
threatintel,internet monitoring osint telegram bot for windows
User: visualbasic6
osint infosec cybersecurity threatintel threat-intelligence automation collaborative-intelligence

wssheldon / osintui
threatintel,OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys
User: wssheldon
osint rust shodan threatintel tui virustotal security analysis

x0rz / phishing_catcher
threatintel,Phishing catcher using Certstream
User: x0rz
Home Page: https://blog.0day.rocks/catching-phishing-using-certstream-97177f0d499a
phishing threat-intelligence certificate-transparency osint threatintel

yeti-platform / yeti
threatintel,Your Everyday Threat Intelligence
Organization: yeti-platform
Home Page: https://yeti-platform.io/
infosec threatintel threat-sharing threat-hunting enrichment intelligence dfir