#

threat

Here are 115 public repositories matching this topic...

activecm / rita

Open

Store Additional Metrics for RITA Imports

fullmetalcache commented Sep 27, 2021

RITA does not store information on how long an import took or how much data was processed in an import.

This ticket is to implement, at a minimum, those metrics mentioned above into the RITA logging.

Read more

feature good first issue

Open

Update references to Bro to Zeek

Open

Disable malwaredomains threat intel feed

4

Find more good first issues

teler

kitabisa / teler

Real-time HTTP Intrusion Detection

go golang log logs threat ids intrusion-detection threat-hunting iocs log-analyzer intrusion intrusion-detection-system threat-intelligence threat-analyzer analyze-logs threat-rules

Updated Jun 17, 2022
Go

mandiant / ThreatPursuit-VM

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

data-science intelligence analytics virtual-machine malware threat cyber fireeye intelligence-analysis mandiant threatintelligence threathunting

Updated Jan 20, 2021
PowerShell

toolswatch / vFeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

python threat exploits vulnerability scap vulnerability-databases threatintel cve oval vulnerability-detection vulnerability-identification vulnerability-scanners cwe capec intelligence-gathering threat-intelligence vulnerability-database-entry threat-intelligence-database vfeed common-vulnerability-exposure

Updated May 28, 2021
Python

certtools / intelmq

Open

file output bot docs: missing parameter description of message_with_type

ghost commented Sep 2, 2021

the file output bot supports message_with_type, but the docs don't mention it.

All output bots using OutputBot.export_event support the same parameters, the docs could have a section on those and then these bots' docs just refer to the section

Read more

bug help wanted documentation good first issue

Open

Convert config examples in bots.rst to yaml

Open

danger rulez parser: pre-compile regular expressions

Find more good first issues

cyberark / SkyArk

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

aws cloud powershell azure privileges threat attacker security-tools cloud-security admins

Updated Feb 13, 2022
PowerShell

izar / pytm

Open

AA03 - is every implementsAuthenticationScheme an SSO scheme?

colesmj commented Oct 21, 2018

"AA03": { "description": "Weakness in SSO Authorization", "source": (Process, Element), "target": (Process, Server), "condition": "target.implementsAuthenticationScheme is False", },

What if the Process implements BasicAuth or uses mutual TLS (neither of which is SSO)?
If the Process uses SAML or OAuth, then maybe.
Maybe authenticationScheme as a string var is neces

Read more

enhancement good first issue Hacktoberfest

Open

DE01 Data Flow Sniffing - condition needs improvement

1

Open

DS01: Weak credential storage - condition too broad

1

Find more good first issues

Yamato-Security / hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

windows rust security attack detection logs event threat forensics dfir response hunting sigma incident yamato hayabusa

Updated Jun 17, 2022
Rust

Yamato-Security / WELA

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

windows log analysis timeline logs event threat forensics dfir response hunting sigma incident

Updated Jun 9, 2022
PowerShell

SupportIntelligence / Icewater

16,432 Free Yara rules created by

cluster threat dna malware-analysis yara

Updated Jun 1, 2019
YARA

Meerkat

TonyPhipps / Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Updated May 4, 2022
PowerShell

TonyPhipps / SIEM

SIEM Tactics, Techiques, and Procedures

Updated Dec 28, 2021

lyy289065406 / threat-broadcast

威胁情报播报

programming threat broadcast safe cve

Updated Jun 17, 2022
Python

rastrea2r / rastrea2r

Collecting & Hunting for IOCs with gusto and style

ioc threat hunting security-tools

Updated Aug 1, 2021
Python

manifoldfinance / defi-threat

a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations on decentralized finance

ethereum smart-contracts threat solidity infosec cve erc20 erc721 defi nfts defi-threat threat-matrix

Updated Jun 14, 2022
JavaScript

Graylog2 / graylog-plugin-threatintel

Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases

graylog threat-score whois threat abuse threatintel spamhaus whois-lookup graylog-plugin threat-analysis otx whois-information

Updated Jun 15, 2022
Java

usnistgov / mobile-threat-catalogue

NIST/NCCoE Mobile Threat Catalogue

nist mobile threat catalogue

Updated Apr 8, 2022
HTML

Patrowl / PatrowlHears

PatrowlHears - Vulnerability Intelligence Center / Exploits

api automation threat secops cybersecurity exploits threat-hunting vulnerabilities threatintel cve cpe vulnerability-detection soc vulnerability-identification cvss threat-intelligence vulnerability-scanning patrowl exploits-scripts vulnerability-intelligence

Updated Jun 2, 2022
Python

docbleach / DocBleach

🚿 Sanitising your documents, one threat at a time. — Content Disarm & Reconstruction Software

java pdf security office threat security-tools content-disarm-reconstruct

Updated Nov 5, 2021
Java

MonarcAppFO

monarc-project / MonarcAppFO

MONARC - Method for an Optimised aNAlysis of Risks by @CASES-LU

security risk-analysis threat cybersecurity cases vulnerabilities risk-assessment governance monarc risk-evaluation risk-treatment

Updated Jun 15, 2022
Shell

CERTCC / Vulnerability-Data-Archive

With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

threat cert vulnerability threatintel cve threat-analysis threat-intelligence vulnerability-report vulnerability-data vulnerability-notes

Updated Jun 22, 2020

jymcheong / SysmonResources

Consolidation of various resources related to Microsoft Sysmon & sample data/log

threat sysmon threat-hunting

Updated Sep 20, 2021
Python

EsreverWoW / ClassicThreatMeter

A simple threat meter for WoW Classic (1.13.2)

wow threat classic wow-classic threat-meter

Updated Nov 4, 2019
Lua

MHaggis / app_splunk_sysmon_hunter

Splunk App to assist Sysmon Threat Hunting

splunk threat sysmon

Updated Mar 7, 2017

SoulSec / resource-threat-hunting

Repository resource for threat hunter

threat threat-hunting threatintel threat-intelligence

Updated Sep 14, 2018

DaemonShao / ThreatCollector

威胁情报采集系统

python scrapy-spider threat

Updated Jun 17, 2022
Python

3c7 / aptmap

A map displaying threat actors from the misp-galaxy

intelligence apt advanced threat persistent misp

Updated Oct 21, 2021
TypeScript

mohlcyber / OpenDXL-ATD-MISP

Automated threat intelligence collection with McAfee ATD, OpenDXL and MISP

threat atd misp mcafee opendxl atd-subscriber dxl mcafee-atd

Updated Feb 21, 2020
Python

rusakovichma / TicTaaC

Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

threat application-security threat-modeling appsec threat-model secure-development devsecops threat-modeling-tool threat-models threat-modeling-from-code

Updated Jun 17, 2022
Java

srcclr / build-inspector

Inspect your builds to look for changes in filesystem, network traffic and running processes.

vagrant gradle machine inspector threat vagrantfile vagrant-virtual-machine java-vm suspicious-builds inspector-monitors

Updated Aug 10, 2018
Ruby

Improve this page

Add a description, image, and links to the threat topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the threat topic, visit your repo's landing page and select "manage topics."