105 Open source projects that are alternatives of or similar to Ti_collector

With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

The Correlated CVE Vulnerability And Threat Intelligence Database API

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Signature base for my scanner tools

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

Authors

Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulation.

Warning lists to inform users of MISP about potential false-positives or other information in indicators

A browser extension for OSINT search

Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.

Real-time HTTP Intrusion Detection

Clusters and elements to attach to MISP events or attributes (like threat actors)

Domain name permutation engine written in Go

Bringing you the best of the worst files on the Internet.

Modules for expansion services, import and export in MISP

Information about my experiences on ethical hacking 💀

🚌 The missing link to connect open-source threat intelligence tools.

BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you

Don't Just Search OSINT. Sweep It.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

Extract and aggregate threat intelligence.

This repo contains logstash of various honeypots

Defanged Indicator of Compromise (IOC) Extractor.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrowlHears - Vulnerability Intelligence Center / Exploits

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

Phishing catcher using Certstream

Sandia Cyber Omni Tracker (SCOT)

Explore Indicators of Compromise Automatically

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

ioc2rpz is a place where threat intelligence meets DNS.

Elemental - An ATT&CK Threat Library

Malware Analysis, Threat Intelligence and Reverse Engineering: LABS

A dashboard for a real-time overview of threat intelligence from MISP instances

Imports Alienvault OTX pulses to a MISP instance

MISP trainings, threat intel and information sharing training materials with source code

Malcom - Malware Communications Analyzer

All-in-one bundle of MISP, TheHive and Cortex

Utilities for Sysmon

The OSINT Omnibus (beta release)

CLI tool for open source and threat intelligence

internet monitoring osint telegram bot for windows

Kaspersky's GReAT KLara

Find phishing kits which use your brand/organization's files and image.

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).

A toolkit for Security Researchers

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Personal compilation of APT malware from whitepaper releases, documents and own research

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

🔍 Offline Analyzer for extracting features, artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more

🐺 Malware analysis platform

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Python3 library and command line for GreyNoise

Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).

A helper to run OSINT queries & manage results continuously

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

Detection of phishing domains and domain squatting. Supports permutations such as homograph attack, typosquatting and bitsquatting.

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings