119 Open source projects that are alternatives of or similar to docker-misp

Best practices in threat intelligence

Collection of best practices to add OSINT into MISP and/or MISP communities

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A curses-style interface for automatic takedown notification based on MISP events.

Defund the Police.

intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; including but not limited to CTI, MISP Threat Sharing, STIX 2.

Tracking APT IOCs

OpenCTI connectors

SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

CyCAT.org API back-end server including crawlers

Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.

ThePhish: an automated phishing email analysis tool

本项目致力于收集网上公开来源的威胁情报，主要关注信誉类威胁情报（如IP/域名等），以及事件类威胁情报。

Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).

The OSINT Omnibus (beta release)

Elemental - An ATT&CK Threat Library

Exporting MISP event attributes to yara rules usable with Thor apt scanner

Don't Just Search OSINT. Sweep It.

Personal compilation of APT malware from whitepaper releases, documents and own research

Sandia Cyber Omni Tracker (SCOT)

Modules for expansion services, import and export in MISP

MISP trainings, threat intel and information sharing training materials with source code

Find phishing kits which use your brand/organization's files and image.

Definition, description and relationship types of MISP objects

Standard-Format Threat Intelligence Feeds

This repo contains logstash of various honeypots

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

A helper to run OSINT queries & manage results continuously

An extendable tool to extract and aggregate IoCs from threat feeds

the fastest way to consume threat intelligence.

Deploy MISP Project software with Vagrant.

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

D4 core software (server and sample sensor client)

A dashboard for a real-time overview of threat intelligence from MISP instances

Warning lists to inform users of MISP about potential false-positives or other information in indicators

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

Build Automated Machine Images for MISP

All-in-one bundle of MISP, TheHive and Cortex

Detection of phishing domains and domain squatting. Supports permutations such as homograph attack, typosquatting and bitsquatting.

internet monitoring osint telegram bot for windows

Domain name permutation engine written in Go

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

A toolkit for Security Researchers

Authors

No description or website provided.

🚌 The missing link to connect open-source threat intelligence tools.

Signatures and IoCs from public Volexity blog posts.

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

This project is a SIEM with SIRP and Threat Intel, all in one.

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

github.com/MISP/MISP

Malware Sample Sources

Python bindings for Yeti's API

Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

CIFv3 DeploymentKit