fdiskyou / Threat Intel
Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).
Stars: ✭ 252
Projects that are alternatives of or similar to Threat Intel
Malware-Sample-Sources
Malware Sample Sources
Stars: ✭ 214 (-15.08%)
Mutual labels: malware, threat-hunting, threat-intelligence
Threat Hunting
Personal compilation of APT malware from whitepaper releases, documents and own research
Stars: ✭ 219 (-13.1%)
Mutual labels: malware, threat-hunting, threat-intelligence
malware-persistence
Collection of malware persistence and hunting information. Be a persistent persistence hunter!
Stars: ✭ 109 (-56.75%)
Mutual labels: malware, threat-hunting, threat-intelligence
Malware Feed
Bringing you the best of the worst files on the Internet.
Stars: ✭ 69 (-72.62%)
Mutual labels: malware, threat-hunting, threat-intelligence
Misp Galaxy
Clusters and elements to attach to MISP events or attributes (like threat actors)
Stars: ✭ 276 (+9.52%)
Mutual labels: malware, threat-hunting, threat-intelligence
Teler
Real-time HTTP Intrusion Detection
Stars: ✭ 1,248 (+395.24%)
Mutual labels: threat-hunting, threat-intelligence
Patrowlhears
PatrowlHears - Vulnerability Intelligence Center / Exploits
Stars: ✭ 89 (-64.68%)
Mutual labels: threat-hunting, threat-intelligence
Mihari
A helper to run OSINT queries & manage results continuously
Stars: ✭ 239 (-5.16%)
Mutual labels: threat-hunting, threat-intelligence
Mthc
All-in-one bundle of MISP, TheHive and Cortex
Stars: ✭ 134 (-46.83%)
Mutual labels: threat-hunting, threat-intelligence
Malcom
Malcom - Malware Communications Analyzer
Stars: ✭ 988 (+292.06%)
Mutual labels: malware, threat-intelligence
Patrowldocs
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
Stars: ✭ 105 (-58.33%)
Mutual labels: threat-hunting, threat-intelligence
Threatbus
🚌 The missing link to connect open-source threat intelligence tools.
Stars: ✭ 139 (-44.84%)
Mutual labels: threat-hunting, threat-intelligence
Signature Base
Signature base for my scanner tools
Stars: ✭ 1,212 (+380.95%)
Mutual labels: threat-hunting, threat-intelligence
Ioc Explorer
Explore Indicators of Compromise Automatically
Stars: ✭ 73 (-71.03%)
Mutual labels: threat-hunting, threat-intelligence
Dovehawk
Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
Stars: ✭ 97 (-61.51%)
Mutual labels: threat-hunting, threat-intelligence
Analyst Arsenal
A toolkit for Security Researchers
Stars: ✭ 112 (-55.56%)
Mutual labels: threat-hunting, threat-intelligence
Docker Misp
Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
Stars: ✭ 148 (-41.27%)
Mutual labels: malware, threat-intelligence
Opensquat
Detection of phishing domains and domain squatting. Supports permutations such as homograph attack, typosquatting and bitsquatting.
Stars: ✭ 149 (-40.87%)
Mutual labels: threat-hunting, threat-intelligence
Phishingkithunter
Find phishing kits which use your brand/organization's files and image.
Stars: ✭ 177 (-29.76%)
Mutual labels: threat-hunting, threat-intelligence
Sysmontools
Utilities for Sysmon
Stars: ✭ 903 (+258.33%)
Mutual labels: threat-hunting, threat-intelligence
Threat INTel Reports
Archive of publicly available threat/cybercrime INTel reports (mostly APT Reports but not limited to). Useful as a reference when you emulate/simulate threat actors on a daily basis. Please create an issue if I'm missing a relevant Report.
Warning: If you are looking for every type of publicly available documents and notes related to APTs have a look at APTnotes and aptnotes. Unfortunately the way they store and sort their data doesn't work for me anymore.
Note: You can also find a page with an attempt to sort these reports by APT group name, based on the ThaiCert Threat Actor Encyclopedia and the Group pages of the MITRE ATT&CK team. This is work in progress and you can find it here: APT-Groups.
Depending on what you are looking for, you may also find this page useful.
2021
| Title | Month | Source |
|---|---|---|
| The Evolution of the FIN7 JSSLoader | Jan | Morphisec |
| A wild Kobalos appears: Tricksy Linux malware goes after HPCs | Feb | ESET |
| Lazarus targets defense industrywith ThreatNeedle | Feb | Kaspersky |
| LazyScripter: From Empire to double RAT | Feb | MalwareBytes |
| Technical Analysis of Babuk Ransomware | Feb | McAfee |
2020
2019
2018
2017
2016
2015
2014
2013
2012
2011
| Title | Month | Source |
|---|---|---|
| W32.Stuxnet Dossier | Feb | Symantec |
| Global Energy Cyberattacks: Night Dragon | Feb | McAfee |
| Stuxnet Under the Microscope | Apr | ESET |
| Advanced Persistent Threats: A Decade in Review | Jun | Command Five Pty Ltd |
| The Lurid Downloader | Aug | Trend Micro |
| Revealed: Operation Shady Rat | Aug | McAfee |
| Enter the Cyber-dragon | Sep | Vanity Fair |
| SK Hack by an Advanced Persistent Threat | Sep | Command Five Pty Ltd |
| Alleged APT Intrusion Set: "1.php" Group | Oct | Zscaler |
| The Nitro Attacks: Stealing Secrets From The Chemical Industry | Oct | Symantec |
2010
| Title | Month | Source |
|---|---|---|
| The Command Structure Of The Aurora Botnet | Jan | Damballa |
| Operation Aurora: Detect, Diagnose, Respond | Jan | HBGary |
| Operation Aurora | Feb | HBGary |
| Combating Aurora | Jan | McAfee |
| In-Depth Analysis Of Hydraq: The Face Of Cyberwar Enemies Unfolds | Mar | CA |
| Shadows In The Cloud: Investigating Cyber Espionage 2.0 | Apr | Shadowserver |
| The Msupdater Trojan And Ongoing Targeted Attacks | Sep | Zscaler |
2009
| Title | Month | Source |
|---|---|---|
| Tracking GhostNet: Investigating a Cyber Espionage Network | Mar | TheSecDevGroup |
| DECLAWING THE DRAGON: WHY THE U.S. MUST COUNTER CHINESE CYBER-WARRIORS | Jun | NA |
| Capability of the People\92s Republic of China to Conduct Cyber Warfare and Computer Network Exploitation | Oct | Northrop Grumman |
| Russian Cyberwar on Georgia | Nov | georgiaupdate.gov.ge |
References
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].