#

threat-intelligence

Here are 271 public repositories matching this topic...

rshipp / awesome-malware-analysis

Star

Defund the Police.

list awesome static-analysis chinese dynamic-analysis awesome-list malware-analysis chinese-translation malware-research threat-sharing threatintel free-analysis malware-samples analysis-framework automated-analysis network-traffic threat-intelligence domain-analysis malware-collection drop-ice

Updated Aug 25, 2020

MISP / MISP

Star

MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

security intelligence cybersecurity fraud-management threat-hunting malware-analysis information-exchange misp threat-sharing threatintel stix fraud-prevention cti information-security information-sharing threat-analysis fraud-detection threat-intelligence threat-intel threat-intelligence-platform

Updated Sep 28, 2020
PHP

elceef / dnstwist

Star

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns osint scanner phishing domains fuzzing threat-hunting typosquatting threat-intelligence homograph-attack idn

Updated Sep 24, 2020
Python

devsecops / awesome-devsecops

Star

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

devops podcast devsecops threat-intelligence

Updated Sep 7, 2020

OpenCTI-Platform / opencti

Star

Open Cyber Threat Intelligence Platform

security intelligence osint cybersecurity cti cyber threat-intelligence

Updated Sep 25, 2020
JavaScript

IntelOwl

intelowlproject / IntelOwl

Star

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

python ioc enrichment osint incident-response observable free-software threat-hunting malware-analyzer malware-analysis threatintel security-tools threat-intelligence honeynet cyber-threat-intelligence osint-python intel-owl

Updated Sep 28, 2020
Python

x0rz / phishing_catcher

Star

Phishing catcher using Certstream

osint phishing certificate-transparency threatintel threat-intelligence

Updated Jun 4, 2020
Python

Neo23x0 / signature-base

Star

Signature base for my scanner tools

ioc scanner anti-virus signature hash dfir threat-hunting yara yara-rules threat-intelligence

Updated Sep 25, 2020
YARA

tomchop / malcom

Star

Malcom - Malware Communications Analyzer

pcap malware dfir infosec malware-analysis network-traffic threat-intelligence

Updated Nov 29, 2017
Python

nshalabi / SysmonTools

Star

Utilities for Sysmon

windows monitoring logging sysmon threat-hunting threatintel netsec sysinternals threat-intelligence

Updated Dec 27, 2019

toolswatch / vFeed

Star

The Correlated CVE Vulnerability And Threat Intelligence Database API

python threat exploits vulnerability scap vulnerability-databases threatintel cve oval vulnerability-detection vulnerability-identification vulnerability-scanners cwe capec intelligence-gathering threat-intelligence vulnerability-database-entry threat-intelligence-database vfeed common-vulnerability-exposure

Updated Feb 10, 2018
Python

Te-k / harpoon

Star

Open

plugin for PTR-archive

Te-k commented Jan 14, 2020

http://ptrarchive.com/index.html

Read more

PLUGIN good first issue

Open

plugin: proxycheck.io

1

Open

Plugin for Onyphe

1

KasperskyLab / klara

Star

Kaspersky's GReAT KLara

threat-hunting klara yara-rules threat-intelligence

Updated Jun 5, 2020
PHP

ion-storm / sysmon-config

Star

Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing

graylog logging dfir sysmon threat-hunting threat-sharing threatintel netsec sysinternals graylog-plugin threat-analysis threat-intelligence mitre-attack

Updated Feb 20, 2019
Batchfile

ciscocsirt / GOSINT

Star

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).

golang security ioc threat-intelligence

Updated Oct 4, 2018
JavaScript

ninoseki / mitaka

Star

Open

Renew README [help wanted]

3

ninoseki commented Sep 5, 2020

English is not my native tongue. So I believe there are unnatural sentences/expressions in the README.
So please give your any suggestion to improve the README.
Comments on this issue or PR is welcome.

Read more

good first issue help wanted

InQuest / ThreatIngestor

Star

Extract and aggregate threat intelligence.

ioc osint dfir threat-hunting malware-research misp threat-sharing threatintel yara threat-analysis fraud-detection intelligence-gathering security-tools threat-intelligence soar indicators-of-compromise threat-feeds threat-intelligence-platform

Updated Sep 14, 2020
Python

Patrowl / PatrowlManager

Star

Open

Feedback

1

antonmalae commented Nov 15, 2018

I think that you are doing a very necessary system and your idea is cool, but at the moment it has a lot of bugs. From what I noticed, the assets do not understand the ascii characters and the system crashes. In addition, I did not find a description of the API, I would like to integrate your system into TheHive, or rather make it possible to view information about an asset in TheHive. I believe t

Read more

good first issue

InQuest / python-iocextract

Star

Defanged Indicator of Compromise (IOC) Extractor.

ioc library osint base64 decoding dfir malware-research threat-sharing threatintel yara threat-intelligence defang indicators-of-compromise ioc-extractor

Updated Jul 9, 2020
Python

MISP / misp-galaxy

Star

Clusters and elements to attach to MISP events or attributes (like threat actors)

malware classification threat-hunting information-exchange misp stix misp-galaxy threat-actors threat-intelligence adversaries mitre-adversarial-tactics attack-patternon adversary-groups

Updated Sep 27, 2020
Python

InQuest / omnibus

Star

The OSINT Omnibus (beta release)

python security osint iocs security-automation threat-intelligence

Updated Aug 18, 2020
Python

NewBee119 / Ti_Collector

Star

本项目致力于收集网上公开来源的威胁情报，主要关注信誉类威胁情报（如IP/域名等），以及事件类威胁情报。

iocs threat-intelligence dns-sniffer threat-article-crawler threat-feeds

Updated Oct 28, 2017
Python

Elemental-attack / Elemental

Star

Elemental - An ATT&CK Threat Library

attack-detection threat-intelligence attack-defense mitre-attack atomicredteam sigma-rules

Updated Jun 6, 2020
HTML

fdiskyou / threat-INTel

Star

Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).

malware threat-hunting threat-actors cybercrime threat-intelligence threat-intel apt-reports apts

Updated Aug 15, 2020

t4d / StalkPhish

Star

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

osint phishing infosec threat-hunting threatintel fraud-detection threat-intelligence investigation phishing-sites scammers phishing-kit

Updated Jan 25, 2020
Python

sapphirex00 / Threat-Hunting

Star

Personal compilation of APT malware from whitepaper releases, documents and own research

collection malware threat-hunting malware-analysis malware-research threat-sharing threat-modeling yara-rules threat-intelligence malware-detection

Updated Feb 7, 2019

ecstatic-nobel / OSweep

Star

Don't Just Search OSINT. Sweep It.

python osint splunk cybersecurity certificate-transparency ransomware threat-hunting malware-analysis scanners cybercrime threat-analysis pivoting threat-intelligence urlscan-io threatcrowd urlhaus

Updated Jun 24, 2019
Python

sandialabs / scot

Star

Sandia Cyber Omni Tracker (SCOT)

javascript perl incident-response cyber-security scott threat-intelligence

Updated May 22, 2020
Perl

ninoseki / mihari

Star

A helper to run OSINT queries & manage results continuously

censys shodan osint threat-hunting misp thehive threat-intelligence onyphe securitytrails

Updated Sep 12, 2020
Ruby

MISP / misp-modules

Star

Modules for expansion services, import and export in MISP

osint expansion misp-modules misp passivetotal domaintools passive-dns threat-intelligence

Updated Sep 28, 2020
Python

Improve this page

Add a description, image, and links to the threat-intelligence topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the threat-intelligence topic, visit your repo's landing page and select "manage topics."

You can’t perform that action at this time.