Top threat-intelligence open source projects

Stalkphish

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

✭ 256

python osint infosec phishing threat-hunting threat-intelligence threatintel

Spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

freki

🐺 Malware analysis platform

MalwareHashDB

Malware hashes for open source projects.

✭ 31

ioc database malware hash md5 archive antivirus malware-analysis malware-research virustotal threat-intelligence virusshare

SyntheticSun

SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

yara-rules

Yara rules written by me, for free use.

✭ 13

YARA dfir malware-analysis yara yara-rules threat-intelligence

nsm-attack

Mapping NSM rules to MITRE ATT&CK

✭ 53

suricata network-security-monitoring nsm threat-intelligence mitre-attack suricata-rules

misp-osint-collection

Collection of best practices to add OSINT into MISP and/or MISP communities

✭ 54

HTML osint misp threat-sharing cyber-security threat-intelligence

pybinaryedge

Python 3 Wrapper for the BinaryEdge API https://www.binaryedge.io/

✭ 16

python threat-hunting threatintel threat-intelligence

rstthreats

Aggregated Indicators of Compromise collected and cross-verified from multiple open and community-supported sources, enriched and ranked using our intelligence platform for you. Threat Intelligence, Threat feed, Open source feed.

✭ 17

cybersecurity threatintel threat-intelligence indicators-of-compromise

DaProfiler

DaProfiler allows you to create a profile on your target based in France only. The particularity of this program is its ability to find the e-mail addresses your target.

✭ 58

javascript python CSS profile instagram social-media facebook osint social-network skype emails information-gathering threat-intelligence reconnaissance osint-python osint-tools

pyc2bytecode

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

✭ 70

python static-analysis reverse-engineering disassembler cybersecurity infosec malware-analysis malware-research blueteam security-tools threat-intelligence infosectools

ayashige

Ayashige provides a list of suspicious newly updated domains as a JSON feed

✭ 27

python Dockerfile osint threat-intelligence

attckr

⚔️MITRE ATT&CK Machinations in R

✭ 22

r cybersecurity rstats threat-intelligence mitre-attack

connectors

OpenCTI connectors

✭ 135

python Dockerfile cybersecurity misp cti threat-intelligence mitre-attack

best-practices-in-threat-intelligence

Best practices in threat intelligence

✭ 38

HTML shell misp threat-sharing threatintel information-sharing threat-intelligence

OSINT-Brazuca

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

✭ 508

osint hacking threat-hunting brasil threatintel threat-intelligence

IronNetTR

Threat research and reporting from IronNet's Threat Research Teams

✭ 36

Jupyter Notebook threat-hunting threatintel iocs threat-intelligence indicators-of-compromise

YAFRA

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

misp-takedown

A curses-style interface for automatic takedown notification based on MISP events.

✭ 19

python misp threat-sharing information-sharing misp-api threat-intelligence abuse-detection

cycat-service

CyCAT.org API back-end server including crawlers

✭ 25

python shell cybersecurity misp cti threat-intelligence mitre-attack cycat

AutonomousThreatSweep

Threat Hunting queries for various attacks

✭ 70

security cybersecurity infosec threat-hunting threat-intelligence threat-hunting-queries

client-python

OpenCTI Python Client

✭ 45

python cybersecurity cti threat-intelligence

TwiTi

This is a project of "#Twiti: Social Listening for Threat Intelligence" (TheWebConf 2021)

✭ 120

python threat-intelligence

Scrummage

The Ultimate OSINT and Threat Hunting Framework

✭ 355

python HTML CSS shell Dockerfile javascript osint dashboard web-application threat-hunting cyber-security threat-intelligence open-source-intelligence

coronavirus-covid-19-SARS-CoV-2-IoCs

All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns

✭ 67

ioc threat-intelligence cves indicator-of-compromise ioc-files

FireHOL-IP-Aggregator

Application for keeping feeds from FireHOL https://github.com/firehol/blocklist-ipsets with IP addresses appearance history. HTTP-based API service is developed for search requests.

✭ 26

python mongodb firehol threat-intelligence

sqhunter

A simple threat hunting tool based on osquery, Salt Open and Cymon API

✭ 64

python security saltstack threat-hunting threatintel osquery security-tools threat-intelligence

MindMaps

#ThreatHunting #DFIR #Malware #Detection Mind Maps

✭ 224

windows detection incident-response forensics dfir threat-hunting mindmap threat-intelligence

Phishruffus

Intelligent threat hunter and phishing servers

✭ 44

python phishing threat-analysis threat-intelligence phishing-servers

Azure-Sentinel-4-SecOps

Microsoft Sentinel SOC Operations

✭ 140

powershell HTML CSS M4 microsoft security azure incident-response secops threat-hunting siem hunting soc ir cloudsecurity threat-intelligence azure-sentinel microsoft-sentinel

awesome-malware-analysis

Defund the Police.

✭ 9,181

list awesome static-analysis chinese dynamic-analysis awesome-list malware-analysis chinese-translation malware-research threat-sharing threatintel malware-samples analysis-framework automated-analysis network-traffic threat-intelligence domain-analysis malware-collection drop-ice

censys-recon-ng

recon-ng modules for Censys

✭ 29

python shell osint cybersecurity penetration-testing pentesting threat-hunting threatintel recon-ng threat-intelligence censys-api osinttool osint-reconnaissance recon-ng-modules

MurMurHash

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

✭ 79

python phishing murmurhash3 cybersecurity infosec threatintel murmurhash blueteam security-tools threat-intelligence redteaming redteam purpleteam threatintelligence phishing-detection blueteaming threathunting proactive-security

SSHapendoes

Capture passwords of login attempts on non-existent and disabled accounts.

✭ 31

c Makefile canary honeypot sshd threat-hunting threat-intelligence honeypots ssh-rankings custom-pam capture-passwords

malware-persistence

Collection of malware persistence and hunting information. Be a persistent persistence hunter!

✭ 109

persistence malware threat-hunting malware-analysis threat-intelligence malware-detection malware-persistence

docker-misp

A (nearly) production ready Dockered MISP

✭ 184

shell Dockerfile PHP docker security misp threat-sharing security-tools threat-intelligence

Malware-Sample-Sources

Malware Sample Sources

✭ 214

virus malware malwareanalysis cybersecurity infosec viruses threat-hunting malware-analysis malware-research virus-scanning malware-samples threat-intelligence malware-sample malware-detection malware-database malware-dataset advanced-persistent-threat

intelligence-icons

intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; including but not limited to CTI, MISP Threat Sharing, STIX 2.

✭ 32

javascript shell intelligence icons misp threat-intelligence

ThreatIntelligence

Tracking APT IOCs

✭ 23

threat-hunting threat-sharing threatintel threat-intelligence

threat-intel

Signatures and IoCs from public Volexity blog posts.

✭ 130

python YARA ruby yara yara-rules threat-intelligence snort-rules suricata-rules

ThePhish

ThePhish: an automated phishing email analysis tool

d4-core

D4 core software (server and sample sensor client)

✭ 40

python HTML c shell Makefile network-monitoring network-security threat-intelligence d4-project

Public-Intelligence-Feeds

Standard-Format Threat Intelligence Feeds

✭ 60

threatintel threat-intelligence

mail to misp

Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.

✭ 61

python shell threat-hunting misp threatintel misp-api threat-intelligence

CCXDigger

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

✭ 45

incident-response forensics dfir threat-intelligence digger velociraptor cybercx

Top 106 threat-intelligence open source projects